Security brawn with the brain to prevent data breaches

Highly interconnected businesses competing in the digital economy have to be ever more vigilant in protecting their core business assets. They have to spot vulnerabilities and address potential compromises or gaps in their infrastructure that criminals could exploit to cause service disruption or data breach. The emergence of increasingly sophisticated evasion techniques further puts the field of threat detection and forensic investigation to the test.

A recent survey of IT decision makers (ITDMs) at organizations with more than 250 employees across Asia Pacific revealed that their two greatest concerns were securing the cloud and protecting against vulnerabilities in IT systems. However, among the 59% of ITDMs in the survey who reported a security breach in the last year, only 22% of them discovered this within minutes of the breach occurring. In some sectors, such as healthcare, it took 53% of the respondents days, months or even years to spot the breaches.

Such deficient threat identification and response can be highly costly to the organizations with loss of sensitive data, financial losses and reputational damage. To better protect their organizations, only 15% of the ITDMs surveyed use threat detection technologies driven by actionable threat intelligence.

The Asia Pacific respondents cited ‘improved risk management’ as the greatest value of threat intelligence, with 44% of them having established their own threat research/incident response team. However, the research – which was undertaken on behalf of Fortinet by independent research firm Lightspeed GMI – found that within three to five years, 38% of the organizations could be outsourcing cybersecurity functions to a managed security service provider (MSSP), up from 30% today.

The study highlights the urgent need among enterprises from all sectors in Asia Pacific to prioritize end-to-end cybersecurity protection with actionable threat intelligence capabilities and processing power to analyze huge amounts of raw data and network traffic to find threats.

Fabric-driven intelligence

Enterprises need to respond more rapidly and effectively to dynamic security threats by investing in security solutions that eliminate complexity and deliver seamless security posture across the entire network – end-point, access, network, data center and even the cloud – without compromising network performance.

Incorporating patented security technologies, the Fortinet Security Fabric further enhance these capabilities with both local and global threat intelligence and throughput performance to facilitate rapid and effective detection of sophisticated attacks and dynamic segmentation of critical networks and data. Unified within the Fortinet Security Fabric, Fortinet’s Advanced Threat Protection (ATP) solutions leverage the dynamic analysis and intelligence of FortiSandbox to protect against today’s most advanced threats and zero-day exploits.

“All our security solutions on Fortinet Security Fabric are tied to FortiGuard Labs research,” says Gavin Chow, Network Security Strategist of FortiGuard Labs. “FortiGuard provides real-time updates, threat intelligence, analysis and resolutions to the entire security fabric.”

As cybercriminals evolve new attack strategies at an alarming rate and employ techniques that could achieve full compromise within minutes of a breach, new capabilities for rapid detection and automated response, such as behavioral analytics, have become a key component for defense.

“In real-life situations, some behavioral systems can be slow with situations so complex that the time taken to analyze is much longer than expected,” Chow adds. “In this case, Fortinet would rather utilize signatures to detect known malware quickly, while putting unknown malware through our FortiSandbox solution for further scanning and detection. Our strength is in the delivery of top notch security without compromising performance at all times.”

Power to analyze

The Fortinet FortiSandbox 3000D appliance and FortiSandbox Cloud service earned the prestigious NSS Labs Recommendations for Breach Detection earlier this year, highlighting the effectiveness of the Fortinet Security Fabric in protecting enterprises and mid-sized organizations in the battle to tackle the most advanced cyber threats.

In NSS Labs’ Breach Detection Systems (BDS) Group Test, Fortinet’s ATP solutions have managed to detect 100% of all the exploits delivered by social media and drive-by downloads, while at the same time overcoming all evasion techniques such as SSL encrypted malware and communications commonly used to hide ransomware, which is no small feat.

The on-premise FortiSandbox 3000D, coupled with FortiClient, features 10 Gbps enterprise performance – the highest of any tested solution – and achieved an overall breach detection rate of 99% and called out 100% of the malware attacking offline devices that aren’t protected within the boundaries of a corporate network.

Fortinet also received NSS Labs recommendations for its FortiGate Next-Generation Firewalls, FortiGate Data Center Intrusion Prevention System, FortiClient Endpoint Protection, and FortiWeb Web Application Firewalls, among others accolades.

This is a QuestexAsia feature commissioned by Fortinet.