What We Do
How we do it
Resources
SECURITY ADVISORIES
May 11, 2022
CVE-2022-26923 - Active Directory Domain Services Elevation of Privilege Vulnerability
THE THREAT Microsoft has disclosed a new vulnerability impacting Active Directory Certificate Services (ADCS) tracked as CVE-2022-26923 (Active Directory Domain Services Elevation of Privilege Vulnerability). If exploited successfully, an authenticated attacker can escalate privileges in environments where ADCS is running on the domain. eSentire is aware of technical details and tooling [2] for…
Read More
View all Advisories →
Company
ABOUT ESENTIRE
About Us
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 1200+ organizations in 75+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
Read about how we got here
Leadership Work at eSentire
LATEST PRESS RELEASE
May 17, 2022
Cybersecurity Leader eSentire Continues Its Commitment to Rigorous Security Standards Earning PCI DSS Certification
Waterloo, ON, May 17, 2022 — eSentire, the Authority in Managed Detection and Response (MDR), maintains one of the most secure and robust IT environments of any MDR provider in the industry. To that end, eSentire today announced that it has received the Payment Card Industry Data Security Standard (PCI DSS) certification, considered one of the most stringent and comprehensive payment card…
Read More
Partners
PARTNER PROGRAM
e3 Ecosystem
We provide sophisticated cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). Find out why you should partner with eSentire, the Authority in Managed Detection and Response, today.
Learn more
ECOSYSTEM PARTNER RESOURCES
Apply to become an e3 ecosystem partner with eSentire, the Authority in Managed Detection and Response.
Login to the Partner Portal for resources and content for current partners.
Search
Resources
Blog — Mar 28, 2019

The importance of building an integrated AI-human cybersecurity strategy

Speak With A Security Expert Now

As originally posted on Enterprise CIO on March 27, 2019

In light of today’s digital transformation causing businesses to operate at machine speeds, organisations need a new way to spot and resolve possible security events. Network operations have become automated, but so have cyber threats. The speed and scale of these threats requires a response that has exceeded analysts’ ability.

That doesn’t mean skilled cybersecurity analysts are unnecessary. Rather, it’s a question of designing a suitable technology partner to compensate for human error and resource limitations within security strategies. It’s a matter of how chief information officers can leverage new, advanced technologies to match the scale and complexity of the evolving threat landscape.

Threats beyond human expectations

Major attacks such as the Mirai botnet distributed denial of service (DDoS) and WannaCry ransomware are a clear demonstration of the scope and breadth of cyber threat actors exceeding what was previously thought possible. Furthermore, 2.6 billion records were compromised worldwide in 2017, an 87 percent increase over 2016, which translates to 7.1 million records that are stolen or lost per day.

The democratisation of the tools and knowledge required to execute advanced cyber threats is a key reason for the escalated threat environment. You no longer have to be a nation-state to have access to sophisticated hacking tools. Malware-as-a service, in all of its guises, is readily available on the Dark Web and sold on a commission basis. Anyone who wants to make a fast buck and knows how to get on the Dark Web can become a hacker. The goal posts have changed.

Where human ability meets reality

Cybercriminals are the primary culprits behind machine-scale threats, but they are not alone. Whether by an innocent mistake or sheer carelessness, employees play a role as well. The complexity and scale of today’s digitiSed platforms pose a serious challenge to traditional models of security, as there is still a probability of human error.

Enterprise cybersecurity is complex, and there are multiple reasons why securing it now requires an integrated AI and expert analyst approach:

Under new (change) management

Given these influences, what technologies should CIOs choose? These machine-scale problems require machine-scale solutions, like machine learning. But the conversation needs to be about how to apply these technologies in the rightway, to augment the analyst, not replace them. The use of integrated machine learning can have a pertinent and powerful impact on its application in cybersecurity.

Organisations need a new cybersecurity framework to effectively use ML or, more broadly, AI. Instead of looking for low-level patterns in siloed data and then aggregating the output, the focus should be on looking for the patterns that matter in data that is aggregated across many sources.

Using these tools within an integrated approach will optimise the use of these new technologies, ensuring that the data used to determine cybersecurity incident trends and patterns are relevant, informative and accurate.

The promise of AI is to help organisations automate the time-consuming process of analysing the data to understand a threat and to augment their analysts’ capabilities, who then must add context and determine how to respond.

There are three phases of change management in the evolution from human-scale to machine-scale in cybersecurity defense. These are:

Outsmarting the enemy

Cybersecurity seems to get harder with every new exploit and vulnerability, but CIOs now have access to more effective weapons, including AI and ML. Victory over today’s advanced threats requires human-machine collaboration, using integrated AI platforms that empower analysts. This is the strategy that will turn the cybersecurity tide.

View Most Recent Blogs
Dustin Rigg Hillard
Dustin Rigg Hillard Chief Technology Officer
Dustin’s vision is founded on simplifying and accelerating the adoption of machine learning for new use cases. He is focused on automating security expertise and understanding normal network behavior through machine learning. He has deep ML experience in speech recognition, translation, natural language processing, and advertising, and has published over 30 papers in these areas.