What We Do
How we do it
Resources
SECURITY ADVISORIES
Jul 29, 2021
UPDATE: PetitPotam NTLM Relay Attack
THE THREAT PetitPotam is a variant of the NTLM Relay attack discovered by security researcher Gilles Lionel. It is tracked as an authentication bypass vulnerability in Active Directory (Certificate Services); currently no CVE identifier has been assigned to this vulnerability. Proof of Concept (PoC) code released last week [1] relies on the Encrypting File System Remote (EFSRPC) protocol to…
Read More
View all Advisories →
Company
ABOUT eSENTIRE
About Us
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 1000+ organizations in 70+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
Read about how we got here
Leadership Work at eSentire
LATEST PRESS RELEASE
Jul 12, 2021
Tecala and eSentire Partner to Protect Enterprises across APAC from Business-Disrupting Cyber Attacks
Sydney, 12 July, 2021 - Tecala, Australia’s award-winning technology services and IT consulting provider, today announced it has chosen eSentire, the global Authority in Managed Detection and Response (MDR) cybersecurity services, as their exclusive MDR solution provider in Australia and New Zealand. This partnership will enable Tecala to augment its cybersecurity practice and offer enterprises…
Read More
Partners
PARTNER PROGRAM
Partners
Our award-winning partner program offers financial rewards, sales and marketing tools and personalized training. Accelerate your business and grow your revenue by offering our world-class Managed Detection and Response (MDR) services.
Learn about our Partner Program
Resources
Blog — Mar 28, 2019

The importance of building an integrated AI-human cybersecurity strategy

5 min read

As originally posted on Enterprise CIO on March 27, 2019

In light of today’s digital transformation causing businesses to operate at machine speeds, organisations need a new way to spot and resolve possible security events. Network operations have become automated, but so have cyber threats. The speed and scale of these threats requires a response that has exceeded analysts’ ability.

That doesn’t mean skilled cybersecurity analysts are unnecessary. Rather, it’s a question of designing a suitable technology partner to compensate for human error and resource limitations within security strategies. It’s a matter of how chief information officers can leverage new, advanced technologies to match the scale and complexity of the evolving threat landscape.

Threats beyond human expectations

Major attacks such as the Mirai botnet distributed denial of service (DDoS) and WannaCry ransomware are a clear demonstration of the scope and breadth of cyber threat actors exceeding what was previously thought possible. Furthermore, 2.6 billion records were compromised worldwide in 2017, an 87 percent increase over 2016, which translates to 7.1 million records that are stolen or lost per day.

The democratisation of the tools and knowledge required to execute advanced cyber threats is a key reason for the escalated threat environment. You no longer have to be a nation-state to have access to sophisticated hacking tools. Malware-as-a service, in all of its guises, is readily available on the Dark Web and sold on a commission basis. Anyone who wants to make a fast buck and knows how to get on the Dark Web can become a hacker. The goal posts have changed.

Where human ability meets reality

Cybercriminals are the primary culprits behind machine-scale threats, but they are not alone. Whether by an innocent mistake or sheer carelessness, employees play a role as well. The complexity and scale of today’s digitiSed platforms pose a serious challenge to traditional models of security, as there is still a probability of human error.

Enterprise cybersecurity is complex, and there are multiple reasons why securing it now requires an integrated AI and expert analyst approach:

Under new (change) management

Given these influences, what technologies should CIOs choose? These machine-scale problems require machine-scale solutions, like machine learning. But the conversation needs to be about how to apply these technologies in the rightway, to augment the analyst, not replace them. The use of integrated machine learning can have a pertinent and powerful impact on its application in cybersecurity.

Organisations need a new cybersecurity framework to effectively use ML or, more broadly, AI. Instead of looking for low-level patterns in siloed data and then aggregating the output, the focus should be on looking for the patterns that matter in data that is aggregated across many sources.

Using these tools within an integrated approach will optimise the use of these new technologies, ensuring that the data used to determine cybersecurity incident trends and patterns are relevant, informative and accurate.

The promise of AI is to help organisations automate the time-consuming process of analysing the data to understand a threat and to augment their analysts’ capabilities, who then must add context and determine how to respond.

There are three phases of change management in the evolution from human-scale to machine-scale in cybersecurity defense. These are:

Outsmarting the enemy

Cybersecurity seems to get harder with every new exploit and vulnerability, but CIOs now have access to more effective weapons, including AI and ML. Victory over today’s advanced threats requires human-machine collaboration, using integrated AI platforms that empower analysts. This is the strategy that will turn the cybersecurity tide.

Dustin Rigg Hillard
Dustin Rigg Hillard Chief Technology Officer

Dustin’s vision is founded on simplifying and accelerating the adoption of machine learning for new use cases. He is focused on automating security expertise and understanding normal network behavior through machine learning. He has deep ML experience in speech recognition, translation, natural language processing, and advertising, and has published over 30 papers in these areas.