What is Adaptive Threat Protection?
10.07.2020
Read
A basic principle of adaptive security is always to assume that there is something wrong with the system. Continuous monitoring and improvements in security architecture are the main goals. It is unwise to wait for an incident to occur, but to wait, identify, and respond before you have a chance to breach the system. This is also known as threat hunting.
The ATP’s adaptive threat analytics involves data science and machine learning to automatically and quickly learn the legitimate communication patterns that are particular to each send and recipient. Doing so can effectively detect malicious emails, attachments, and links.
Moreover, ATP’s proprietary risks and reputation analysis expand threat detection beyond the known threats to involve highly malicious emails based on multiple vectors, keeping the enterprise and workforce safer than ever before.
The ATP allows security professionals to know what happens when a file with malicious content is detected in an IT environment. Below is the list of some benefits associated with ATP:
An adaptive security architecture can be divided into four periods:
These are often briefly defined as a prediction - assess risks, anticipate attacks and malware, implement base systems and posture; prevent - protect and isolate systems to stop security breaches; respond - investigate incidents, design policy changes, conduct retrospective analysis; defect - prioritize risks, and contain incidents.
These four parameters - combined with policy and compliance measures - are used to help a system capable of quickly tracking and responding to suspicious threats and attacks such as ransomware, viruses, phishing, and so on.
