Behaviour is the key

Issue 9 2020 Cyber Security

Everyone is aware of the cyber risks inherent in using a computer or laptop, which is why businesses spend significant amounts on protection for devices, servers and monitor Internet connections so closely. But, as previously stated, there is more to cybersecurity, especially when it comes to humans and the new way many are working as a result of COVID-19.

John Mc Loughlin, CEO of J2 Software, says remote work is becoming more normal, which not only means working from home, but also coffee shops and other remote locations. In these locations, the risks are higher and the problem of human behaviour is correspondingly higher as well – using free Wi-Fi is very convenient, but can be very risky when logging into servers and using confidential information.

The solution to these problems that can’t be resolved by traditional security software is managing behaviour. According to Mc Loughlin, the best way to do this is by first understanding what normal behaviour is and then identifying anomalies as soon as they occur.

“When it comes to behaviour, visibility into human and system behaviour is key to spotting problems before they turn nasty. With visibility into activity you can quickly identify someone who is malicious as well as those who do things through negligence, accidentally or have been compromised. Changes in behaviour and identifying known risk traits will allow you to identify and cut out insider risk.”

J2 supplies Dtex, an insider threat management solution that delivers always-on, human-centric security by proactively illuminating dangerous activity. Mc Loughlin says the solution will help stop insider threats, prevent data loss and protect the workforce wherever they may be.

Dtex Intercept 6.0 monitors user behaviour, offering ‘Indicators of Intent’ that give cybersecurity teams contextual awareness of workforce activities without invading personal privacy. It uncovers malicious and negligent behaviour before an incident occurs, and provides a full audit trail afterwards. (Dtex caters for the need for privacy and all personal data is masked until authorised people access the system, during an investigation for example.)

Ensuring visibility into behaviour, of both systems and people, allows cybersecurity departments to automatically monitor activities in real time, catching suspicious activities as they begin rather than after the damage is done. Without visibility, Mc Loughlin says all one can do is guess and hope for the best.

Intercept 6.0 continuously collects and synthesises more than 500 unique elements of enterprise telemetry from data, machines, applications and people (DMAP) to highlight dynamic Indicators of Intent that combine to deliver holistic, contextual awareness about an enterprise workforce’s activities. These elements are enriched in near real time using advanced behavioural models that are mapped against a person’s normal activity and peer group baselines.

Find out more about Dtex at www.securitysa.com/11700r


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Five ransomware predictions for 2021
Issue 9 2020 , Cyber Security
How to stay ahead of cyber criminals and protect your data

Read more...
Striking the balance between customer privacy and intimacy
Issue 9 2020 , Cyber Security
While secure IT infrastructure is a key component to keeping customer data secure, customers expect more than adherence to regulations and the latest technologies to help protect their data from falling into the wrong hands.

Read more...
A good future for tech in 2021 and beyond
Issue 9 2020 , Cyber Security
The pandemic drove technology adoption in amazing ways; networking, cloud, security, collaboration, and other digital technologies all played a huge role in keeping the world running.

Read more...
Cyber-industry collaboration through AI
Issue 9 2020 , Cyber Security
SophosAI advances the practices and language that will transform the cybersecurity industry with much-needed transparency and openness.

Read more...
Shifting security to the edge
Issue 9 2020 , Cyber Security
As applications move to the cloud and networks become increasingly complex, organisations require a comprehensive security solution designed to protect the WAN edge.

Read more...
Why security integration is important
Issue 9 2020 , Cyber Security
Adrienne Campbell says the integration of physical and network security is important and offers eight reasons why.

Read more...
The changing face of ransomware
Issue 9 2020, J2 Software , Editor's Choice
Relying only on a layered defence is no longer sufficient; one needs total visibility as a primary cyber defence mechanism.

Read more...
Ensure cybersecurity at the edge
Issue 9 2020 , Cyber Security
Organisations must be aware of the increased need to protect the edge of the network and prioritise cybersecurity before an attack happens.

Read more...
Protecting ICS and SCADA systems
Issue 9 2020 , Cyber Security
Check Point Software´s new rugged gateway secures industrial control systems and critical infrastructures against the most advanced cyber-threats.

Read more...
Cyber defence in an era of digital dependency
Issue 9 2020 , Cyber Security
Businesses across the globe have typically taken an immature approach to cybersecurity, believing that a firewall is an adequate fortress to defend their intellectual property.

Read more...