What We Do
How we do it
Resources
TRU INTELLIGENCE CENTER
Our Threat Response Unit (TRU) publishes security advisories, blogs, reports, industry publications and webinars based on its original research and the insights driven through proactive threat hunts.
View Threat Intelligence Resources →
SECURITY ADVISORIES
Jun 01, 2023
Critical Vulnerability in MOVEit Transfer
THE THREAT eSentire is aware of reports relating to the active exploitation of a currently unnamed vulnerability impacting Progress Software’s managed file transfer software MOVEit Transfer.…
Read More
View all Advisories →
Company
ABOUT ESENTIRE
About Us
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 2000+ organizations in 80+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
Read about how we got here
Leadership Work at eSentire
LATEST PRESS RELEASE
Mar 20, 2023
Exertis and eSentire Partner to Deliver 24/7 Multi-Signal MDR, Digital Forensics & IR Services and Exposure Management to Organisations Across the UK, Ireland, and Europe
Basingstoke, UK– 20 March, 2023. Leading technology distributor, Exertis, announced today that it has bolstered its cybersecurity services, adding eSentire, the Authority in Managed Detection and Response (MDR), to its Enterprise portfolio of offerings. eSentire’s award-winning, 24/7 multi-signal MDR, Digital Forensics & Incident Response (IR), and Exposure Management services will be available…
Read More
Partners
PARTNER PROGRAM
e3 Ecosystem
We provide sophisticated cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). Find out why you should partner with eSentire, the Authority in Managed Detection and Response, today.
Learn more
ECOSYSTEM PARTNER RESOURCES
Apply to become an e3 ecosystem partner with eSentire, the Authority in Managed Detection and Response.
Login to the Partner Portal for resources and content for current partners.
Search
Resources
Blog — Mar 28, 2019

The importance of building an integrated AI-human cybersecurity strategy

4 minutes read
Speak With A Security Expert Now

As originally posted on Enterprise CIO on March 27, 2019

In light of today’s digital transformation causing businesses to operate at machine speeds, organisations need a new way to spot and resolve possible security events. Network operations have become automated, but so have cyber threats. The speed and scale of these threats requires a response that has exceeded analysts’ ability.

That doesn’t mean skilled cybersecurity analysts are unnecessary. Rather, it’s a question of designing a suitable technology partner to compensate for human error and resource limitations within security strategies. It’s a matter of how chief information officers can leverage new, advanced technologies to match the scale and complexity of the evolving threat landscape.

Threats beyond human expectations

Major attacks such as the Mirai botnet distributed denial of service (DDoS) and WannaCry ransomware are a clear demonstration of the scope and breadth of cyber threat actors exceeding what was previously thought possible. Furthermore, 2.6 billion records were compromised worldwide in 2017, an 87 percent increase over 2016, which translates to 7.1 million records that are stolen or lost per day.

The democratisation of the tools and knowledge required to execute advanced cyber threats is a key reason for the escalated threat environment. You no longer have to be a nation-state to have access to sophisticated hacking tools. Malware-as-a service, in all of its guises, is readily available on the Dark Web and sold on a commission basis. Anyone who wants to make a fast buck and knows how to get on the Dark Web can become a hacker. The goal posts have changed.

Where human ability meets reality

Cybercriminals are the primary culprits behind machine-scale threats, but they are not alone. Whether by an innocent mistake or sheer carelessness, employees play a role as well. The complexity and scale of today’s digitiSed platforms pose a serious challenge to traditional models of security, as there is still a probability of human error.

Enterprise cybersecurity is complex, and there are multiple reasons why securing it now requires an integrated AI and expert analyst approach:

Under new (change) management

Given these influences, what technologies should CIOs choose? These machine-scale problems require machine-scale solutions, like machine learning. But the conversation needs to be about how to apply these technologies in the rightway, to augment the analyst, not replace them. The use of integrated machine learning can have a pertinent and powerful impact on its application in cybersecurity.

Organisations need a new cybersecurity framework to effectively use ML or, more broadly, AI. Instead of looking for low-level patterns in siloed data and then aggregating the output, the focus should be on looking for the patterns that matter in data that is aggregated across many sources.

Using these tools within an integrated approach will optimise the use of these new technologies, ensuring that the data used to determine cybersecurity incident trends and patterns are relevant, informative and accurate.

The promise of AI is to help organisations automate the time-consuming process of analysing the data to understand a threat and to augment their analysts’ capabilities, who then must add context and determine how to respond.

There are three phases of change management in the evolution from human-scale to machine-scale in cybersecurity defense. These are:

Outsmarting the enemy

Cybersecurity seems to get harder with every new exploit and vulnerability, but CIOs now have access to more effective weapons, including AI and ML. Victory over today’s advanced threats requires human-machine collaboration, using integrated AI platforms that empower analysts. This is the strategy that will turn the cybersecurity tide.

View Most Recent Blogs
Dustin Rigg Hillard
Dustin Rigg Hillard Chief Technology Officer
Dustin’s vision is founded on simplifying and accelerating the adoption of machine learning for new use cases. He is focused on automating security expertise and understanding normal network behavior through machine learning. He has deep ML experience in speech recognition, translation, natural language processing, and advertising, and has published over 30 papers in these areas.