Network Traffic Analysis

A Comprehensive Guide to Network Detection & Response (NDR) — What CIOs & Security Analysts Should Know

This guide covers what security professionals need to know about NDR – what it is, its key features, the differences between NDR and XDR, what makes it so effective, and what you should consider before implementing an NDR solution in your environment.

A Comprehensive Guide to Network Detection & Response (NDR) — What CIOs & Security Analysts Should Know Read More →

U.S. Cities Relying on Legacy Cybersecurity Plagued By False Positives and Negatives

Cybersecurity teams working in municipal settings face a constant struggle — protecting vital public network infrastructure with limited resources. The situation can reach a breaking point when these teams become overwhelmed managing false positive and negative flags triggered by legacy cybersecurity solutions.

U.S. Cities Relying on Legacy Cybersecurity Plagued By False Positives and Negatives Read More →

Updated for 2022: What is Network Traffic Analysis? A Beginner’s Guide

87 percent of organizations use network traffic analysis (NTA) tools for threat detection and response according to ESG, an IT strategy firm. In their 2020 study, 43 percent of organizations surveyed said NTA is a “first line of defense” for detecting and responding to threats.

Updated for 2022: What is Network Traffic Analysis? A Beginner’s Guide Read More →

Cybersecurity Acronyms: Making Sense of the Alphabet Soup

Trying to decipher Cybersecurity jargon can feel like trying to make sense out of a spoonful of alphabet soup. Is your SIEM equipped with sufficient NTA? What about your XDR? Or wait, was it NDR? What’s IRM, anyway? And whatever happened to UEBA?

Cybersecurity Acronyms: Making Sense of the Alphabet Soup Read More →

Russian Hack of U.S. Federal Agencies Shine Spotlight on SIEM Failures in Cybersecurity

In what the New York Times is calling, “One of the most sophisticated and perhaps largest hacks in more than five years,” malicious adversaries acting on behalf of a foreign government, likely Russian, broke into the email systems of multiple U.S. Federal agencies including the Treasury and Commerce Departments.

Russian Hack of U.S. Federal Agencies Shine Spotlight on SIEM Failures in Cybersecurity Read More →

Recent Ransomware Attacks on U.S. Hospitals Highlight the Inefficiency of Rules-Based Cybersecurity Solutions

A number of recent high profile ransomware attacks on U.S. hospitals have demonstrated the urgency for organizations, municipalities, and critical services to take a proactive approach to protecting networks with a predictive AI solution.

Recent Ransomware Attacks on U.S. Hospitals Highlight the Inefficiency of Rules-Based Cybersecurity Solutions Read More →

The Case Against Using a Frankenstein Cybersecurity Platform

The cybersecurity market has, simply put, been cobbled together. A tangled web of non-integrated systems and alerts from siloed systems. Enterprises are now being forced to utilize a “Frankenstein” of stitched together tools to create a platform that might cover their security bases.

The Case Against Using a Frankenstein Cybersecurity Platform Read More →

Improving on the Typical SIEM Model

Despite its inherent flaws, today’s SIEM software solutions still shine when it comes to searching and investigating log data. One effective, comprehensive approach to network security pairs the best parts of SIEM with modern, AI-driven predictive analysis tools. Alternatively, organizations can replace their outdated SIEM with a modern single platform self-learning AI solution.

Improving on the Typical SIEM Model Read More →

3 Reasons Why a Rule-Based Cybersecurity Platform Will Always Fail

When it comes to advancements in cybersecurity, rule-based systems are holding the industry back. Relying on humans to constantly input and label rules in order to detect and stay ahead of threats is a bottleneck process that is setting security teams up for failure, especially with tools like SIEM, NDR, and NTA.

3 Reasons Why a Rule-Based Cybersecurity Platform Will Always Fail Read More →

Data Overload Problem: Data Normalization Strategies Are Expensive

Financial institutions spend five to ten million dollars each year managing data. A recent Computer Services Inc (CSI) study reveals that most banks expect to spend up to 40 percent of their budgets on regulatory compliance cybersecurity, often adopting expensive data normalization strategies.

Data Overload Problem: Data Normalization Strategies Are Expensive Read More →

Magnify Podcast: Discussing the New Normal with AI Based Cybersecurity Specialists, MixMode

Geoff Coulehan, MixMode’s Head of Strategic Alliances, joined Secrutiny’s “Magnify Podcast,” to discuss the priorities CISOs should focus on to better protect their now-remote team of employees.

Magnify Podcast: Discussing the New Normal with AI Based Cybersecurity Specialists, MixMode Read More →

Why a Platform With a Generative Baseline Matters

MixMode creates a generative baseline. Unlike the historically-based baselines provided by add-on NTA solutions, a generative baseline is predictive, real-time, and accurate. MixMode provides anomaly detection and behavioral analytics and the ability to suppress false positives and surface true positives.

Why a Platform With a Generative Baseline Matters Read More →

Why The Future of Cybersecurity Needs Both Humans and AI Working Together

A recent WhiteHat Security survey revealed that more than 70 percent of respondents cited AI-based tools as contributing to more efficiency. More than 55 percent of mundane tasks have been replaced by AI, freeing up analysts for other departmental tasks.

Why The Future of Cybersecurity Needs Both Humans and AI Working Together Read More →

NTA and NDR: The Missing Piece

Most SIEM vendors acknowledge the value of network traffic data for leading indicators of attacks, anomaly detection, and user behavior analysis as being far more useful than log data. Ironically, network traffic data is often expressly excluded from SIEM deployments, because the data ingest significantly increases the required data aggregation and storage costs typically 3-5x.

NTA and NDR: The Missing Piece Read More →

Guide: The Next Generation SOC Tool Stack – The Convergence of SIEM, NDR and NTA

Traditional security vendors offering solutions like SIEM (Security Information and Event Management) are overpromising on analytics while also requiring massive spend on basic log storage, incremental analytics, maintenance costs, and supporting resources.

Guide: The Next Generation SOC Tool Stack – The Convergence of SIEM, NDR and NTA Read More →