Week 7. Cybersecurity Defence System Has Strengthened



The unification of the two threat detector and hunter, Corvil and Endgame, was announced on July 20, 2017.  The merger marks the milestone for the next generation of cyber security defense system.   

Corvil is a security company specializes in detection of threats in the network.  The company uses the performance and audit data to detect potential threats.  Other than the threat detection mechanism, Corvil also provides the communication between functions within the organization.   When IT members discover abnormal activity in the logs and performance data, they can transfer the information to the security members through the software for further investigation.  Once the security personnel verified the activity are not hacker's act, the information can be forwarded to network engineer.

Endgame, on the other hands, provides centralized security protection of the endpoints.  Key features of Endgame are the detection of attack in memory,  early stage attack prevention, AI-powered chatbot, automated investigation and analysis, and auto elevation to the higher support level.

As most of us know, speed is critical in detecting, analyzing, and responding to threats.  Take the virus infection as an example, the slower the detection or the response is, the wider the spread.  The combination of the two systems from Corvil and Endgame enhances all of those functions mentioned.   Imagine how long it would take for IT and security personnel to respond to a threat when using disjunct tools.  Having a centralized control system with both network and endpoints information not only helps to stop the threats faster, but also reduce the operation cost.

Sources:
https://www.corvil.com

https://www.endgame.com

https://www.corvil.com/about/newsroom/press-releases/endgame-and-corvil-streamlines-targeted-attack-protection

Comments

Post a Comment

Popular posts from this blog

Week 10 - STRIDE: Elevation of Privilege

Image
Elevation of Privilege, in a nutshell, is the act of gaining access to information, data, or code that otherwise not allowed under the current user’s privilege.   Every user account has a set of access right assigned to fit the account holder’s function.   Traditionally, user privileges are divided into groups like administrative, operation, and view only.   Each user is assigned to one or more groups and has the privileges assigned to the groups.   In a more sophisticated system, users in the same groups can have different access rights.   There are two types of privilege elevations, vertical privilege elevation, and horizontal privilege elevation.    Vertical privilege elevation is when a user gains the privileges of another user whose access right is higher than himself or herself.   An example of this is the sudo command in Debian Linux systems.   Normal user can perform superuser operation when added to the sudo list....
Read more

Week 7 - STRIDE: Repudiation

Image
In 2000, couple individuals at Signal Lake were sued for $25 million by a man named Suni Munshani.   He alleged that Signal Lake’s officers promised him a large amount of asset.     Munshani provided an email that purportedly sent from the dependents as the proof for his allegation.   The court ordered security professional to investigate and concluded that the plaintiff altered one of the emails the dependent sent to him.   Although this does not relate to repudiation, it brings an important aspect of non-repudiation.   (memecrunch.com) Repudiation, in short, is the denial of any wrongdoing , which is the very first thing anyone would do when they get caught doing something illegal.   Professional hackers learn to cover their track very well.   Likewise, security professionals learn to track.   For the email tampering case I mentioned, the defendant would not win the lawsuit if old emails weren’t available for invest...
Read more

Week 8. Secure Your Credit Cards

In the past few years, online shopping had increased tremendously.  With the growth of online purchase, the risk of credit card theft also grows proportionally.  To protect consumers, major credit card issuers and those involved in the credit card transaction have worked hard to maintain satisfactory security level.   Credit card issuers, today, provides free services that used to come with a membership fee.  One beneficial service is text, email or phone call notification on credit card transaction.  The feature can be activated in card holder's account settings.  Once activated and set to a desired notification preference, the card holder receives notification of the transaction made to the credit card.  The card holder can also receive notification of suspected transactions.  The mechanism works by studying how and where the credit card is being used.  When the card is used outside of the norm, the transaction will be stopped, and the no...
Read more