sb-nz logo
Story image

Securonix and Cylance partner to drive end-to-end security offering

16 Oct 2018

Security solutions providers Cylance and Securonix have announced a partnership to support the interoperability of CylancePROTECT with the release of the Securonix Security Analytics Platform.

Customers of Cylance and Securonix will now have the tools necessary to implement a prevention-first security strategy with CylancePROTECT and Securonix’s Security Analytics Platform to view and contextualise real-time intelligence collected at the endpoint.

In tandem, the two products will provide security operations centre (SOC) teams with a view of both cloud and endpoint security events in addition to the continuous protection and prevention capabilities required to proactively detect and defeat viruses, malware, ransomware, and other known and unknown threats.

Securonix products senior vice president Nitin Agale says, “By integrating our Security Analytics Platform with CylancePROTECT, we not only prevent bad actors from infecting endpoint systems, but we also ensure that every attempt they make at moving laterally across the network can be promptly detected, traced, and terminated automatically before critical systems or data are compromised.

In combination, CylancePROTECT and the Security Analytics Platform will enable SOC teams to minimise organisational risk while optimising operational efficiency.”

Threats can be resolved and remediated automatically, minimising time-to-detection but and the time between detection and quarantine.

For example, if CylancePROTECT detects and blocks a malicious file at one endpoint, the Security Analytics Platform can respond immediately by pushing out rules to every other endpoint on-premises and in the cloud to quarantine that file and block its execution.

Cylance chief product officer Eric Cornelius says, “Organisations need cybersecurity solutions that are proven to be effective at preventing both today’s and tomorrow’s attacks while providing the actionable threat intelligence SOC teams need to proactively manage cyber risk across the enterprise.”

CylancePROTECT and the Security Analytics Platform aim to provide a consolidated view of security event activity:

  1. CylancePROTECT prevents adversaries from gaining a foothold at the endpoint by detecting and blocking the execution of both file-based and fileless attacks and by applying policies for device and script control, application control, and memory exploitation protection.  
  2. The Security Analytics Platform uses restful APIs to ingest the security event data collected by CylancePROTECT at the endpoint. This includes not only information about suspect files, applications, scripts, and processes, but also event metadata, file attributes, and more.  
  3. The Security Analytics Platform aggregates and correlates ingested data with user behaviour analytics and network-based threat indicators and applies sophisticated machine learning algorithms to accurately detect advanced and insider threats and rank them based on risk scores. The Security Analytics Platform then generates prioritised alerts for threats that exceed a pre-defined risk threshold.  
  4. SOC personnel can visualise and interrogate the resulting threat chain data within the Securonix management dashboard, drilling down and pivoting from one threat indicator
Story image
Cybersecurity budgets still not keeping up with threats — report
Executive teams are failing to recognise the level of damage cyber-threats pose to organisations, according to Sophos — many of them taking a ‘conservative approach’ to cybersecurity expenditure.More
Story image
AvePoint brings Salesforce Cloud Backup to channel partners
The product adds to the AvePoint suite of trusted Cloud Backup for Microsoft 365 and Dynamics 365 to provide managed service providers with backup and restore capabilities across multiple, popular SaaS providers.More
Story image
Data transparency increasingly important, Kaspersky study states
“It is clear from the data that people have developed a sense of control and they are now demanding openness about how and where their data is being managed."More
Link image
Virtual demo: Diagnose network cabling problems with the LinkIQ Cable+Network Tester
If you’re finding it difficult to install access points and cabling, or if you can’t pinpoint an issue with a video camera or end user, the LinkIQ Cable+Network Tester could be exactly what you need. Try a free, fully interactive demo now.More
Story image
Cohesity appoints its very first CISO
In the newly created role, new appointee Brian Spanswick will focus on advancing and optimising IT and security for Cohesity and its customers, the company says.More
Story image
Microsoft Exchange breach a wake-up call to ditch the server
"There are owners who still have in-house exchange servers because they are suspicious of the cloud or have concerns about their data sovereignty or don't want to contemplate the capital expenditure. But the warning is clear. Get rid of them."More