Johannesburg, 22 May 2018
Nclose, a local cyber security solutions and managed detection and response (MDR) provider, will be presenting at ITWeb's Security Summit, taking place in Johannesburg this week from 22 to 23 May, and Cape Town on 29 May. According to Stephen Osler, founder and Business Development Director at Nclose, Managed Detection and Response is a timely entry in a world where signature-based defence is no longer sufficient.
The shortcomings of signature defence
With the enormous volumes of network traffic in the digital era, it's becoming common for organisations to only discover large-scale cyber attacks weeks or even months after they occur.
Often, breaches are noticed by a third party, leaving the victim apologising for its lack of situational awareness. While indispensable for protection against known attack patterns, signature defences, like Web filtering or antivirus, are virtually blind to new and increasingly sophisticated hacking techniques.
Osler says that most IT departments and security service providers focus on compliance with accepted security standards.
"Unfortunately, professional hackers, especially those employed by crime syndicates, don't play by the same rules. They're often well-funded, leverage the latest technologies, and are already working on next-level strategies against which no defences have been developed."
"One of the few viable solutions is proactive threat hunting," he continues. "This is why Nview was created around the MDR paradigm rather than traditional MSSP."
MSSP vs MDR
The managed security service provider (MSSP) approach strives to operational manage solutions by fine-tuning defences using historical data from known or popular breaches after the fact. Unfortunately, it emphasises passive protection against historical attack types instead of active detection of live, evolved assaults.
Managed detection and response (MDR), on the other hand, assumes that attacks are always in progress. In this model, a highly skilled team of human investigators, aided by powerful monitoring and analytical tools, proactively hunts for unseen threats in real time. This methodology maximises the probability of attacks being exposed prior to, while or soon after taking place, so the damage radius can be significantly reduced.
"Organisations can't afford to run their security on cruise control," warns Osler, while acknowledging that security is only one of many business concerns over which their budgets must be stretched. They simply cannot procure the level of dedicated expertise and technologies required. "This is why Nview MDR is such an attractive option. As a managed service, it makes top skills, techniques and solutions accessible to our customers in an affordable, scalable package."
Next-generation SOC
nView offers many technological advances over existing SOC services. For example, its hybrid cloud/onsite model allows customers to analyse collected data for their own internal operations and security improvement initiatives. It also looks beyond historical data, such as security logs, real-time DNS traffic, application processes and other dynamic activity indicators.
Osler encourages every security-conscious organisation to attend ITWeb's Security Summit and visit the Nclose stand to discuss Nview's advanced features. "An Nclose technical expert will also be speaking at the event about the benefits of MDR over traditional strategies, and we'll be ready to answer questions from visitors in detail."
Read more about nView's advantages and benefits at https://nview.io
ITWeb Security Summit 2018
The ITWeb Security Summit is southern Africa's definitive conference and expo for information security, IT and business professionals. This year, over 70 expert speakers will deliver key insights across seven tracks, including workshops and training courses during the expanded five-day event. The ITWeb Security Summit will be staged at Vodacom World, Midrand, from 22 to 23 May 2018; and CTICC Cape Town on 29 May 2018. Focused and interactive workshops as well as in-depth training courses will be run in the days around the main conference and exhibition.
For more information, go to www.securitysummit.co.za
For information on Security Summit Cape Town, go to http://v2.itweb.co.za/event/itweb/security-summit-ct-2018
Share