printer friendly version

Behaviour is the key

Everyone is aware of the cyber risks inherent in using a computer or laptop, which is why businesses spend significant amounts on protection for devices, servers and monitor Internet connections so closely. But, as previously stated, there is more to cybersecurity, especially when it comes to humans and the new way many are working as a result of COVID-19.

John Mc Loughlin, CEO of J2 Software, says remote work is becoming more normal, which not only means working from home, but also coffee shops and other remote locations. In these locations, the risks are higher and the problem of human behaviour is correspondingly higher as well – using free Wi-Fi is very convenient, but can be very risky when logging into servers and using confidential information.

The solution to these problems that can’t be resolved by traditional security software is managing behaviour. According to Mc Loughlin, the best way to do this is by first understanding what normal behaviour is and then identifying anomalies as soon as they occur.

“When it comes to behaviour, visibility into human and system behaviour is key to spotting problems before they turn nasty. With visibility into activity you can quickly identify someone who is malicious as well as those who do things through negligence, accidentally or have been compromised. Changes in behaviour and identifying known risk traits will allow you to identify and cut out insider risk.”

J2 supplies Dtex, an insider threat management solution that delivers always-on, human-centric security by proactively illuminating dangerous activity. Mc Loughlin says the solution will help stop insider threats, prevent data loss and protect the workforce wherever they may be.

Dtex Intercept 6.0 monitors user behaviour, offering ‘Indicators of Intent’ that give cybersecurity teams contextual awareness of workforce activities without invading personal privacy. It uncovers malicious and negligent behaviour before an incident occurs, and provides a full audit trail afterwards. (Dtex caters for the need for privacy and all personal data is masked until authorised people access the system, during an investigation for example.)

Ensuring visibility into behaviour, of both systems and people, allows cybersecurity departments to automatically monitor activities in real time, catching suspicious activities as they begin rather than after the damage is done. Without visibility, Mc Loughlin says all one can do is guess and hope for the best.

Intercept 6.0 continuously collects and synthesises more than 500 unique elements of enterprise telemetry from data, machines, applications and people (DMAP) to highlight dynamic Indicators of Intent that combine to deliver holistic, contextual awareness about an enterprise workforce’s activities. These elements are enriched in near real time using advanced behavioural models that are mapped against a person’s normal activity and peer group baselines.

Find out more about Dtex at www.securitysa.com/11700r

Share this article:

Further reading: