Advanced Threat Protection – Know the Unknown

Advanced threat refers to sophisticated malware attacks or hacking-based attacks targeting sensitive data. Unlike known threats, they cannot be detected based on signatures. Sandboxing, big-data analytics, machine learning, and whitelisting are some of the strategies that provide protection against advanced persistent threats. Let’s take a look at some of the organizations that provide such solutions.

Cisco: Providing threat intelligence, real-time malware blocking, and advanced sandboxing,its features include file analysis against 700+ behavioral markers, and malware detection using one-to-one signature matching, machine learning and fuzzy fingerprinting.

FireEye: It leverages a virtual execution engine to identify and stop advanced threats that can circumvent traditional security approaches based on firewalls and malware signatures.

Fortinet: Dubbed as FortiSandbox, it provides solutions extending from the network edge all the way to the endpoint device. Its wide variety of offerings include advanced threat detection, automated mitigation, and insights to halt attacks and data loss by analyzing potential malware and malicious URLs in a safe sandbox environment.

Hexis Cyber Solutions: Using a big-data platform, deep forensic scanning, analytics, and a library of threats, it uses an integrated approach that identifies threats. Using this input, it then validates and automatically removes the threats.

IBM Security: One of the world IT pioneers, IBM provides Threat Protection System integrating 450 security tools from more than 100 vendors using an adaptive architecture that changes with the environment, as well as advanced analytics and automatic quarantine of noncompliant endpoints.

Unisys: Its advanced threat protection is unique as it conceals the endpoints making them undetectable to unauthorized parties, both inside and outside the organization.