Quick navigation

Darktrace

Darktrace Enterprise Immune System

Self-learning cyber AI technology that detects novel attacks and insider threats at an early stage.

Website

Main categories

Application Security

Infrastructure Security

Sub categories

AI-Based Application Threat Defense

Internet of Things

Malware Infection Analysis and Monitoring Services

Network Intrusion Prevention

Secure Email

Real Time Risk Assessment

Machine Learning

Artificial Intelligence

security monitoring as a service

Value Proposition

Problem

Perimeter controls are dependent on signatures and rules – if they miss an attack at the point of entry, they have failed and cannot take further action. Legacy systems such as firewalls, endpoint security methods and other tools such as SIEMs and sandboxes are becoming insufficient to counter the speed and sophistication of attacks

Solution

Powered by Darktrace’s world-leading AI, the Enterprise Immune System combines real-time threat detection, digital visualization, and advanced investigation capabilities in a single, unified system that is easy to install. Based on the principles of the human immune system, the solution is self-learning, detecting novel threats without using prior assumptions of what ‘malicious’ activity looks like.

Features

Covers the Entire Enterprise : Darktrace’s platform approach means that the Enterprise Immune System protects data and systems wherever they are, correlating its insights across diverse environments. This includes Cloud, Email, SaaS, Network, IoT and OT
Instead of relying on signatures, the Enterprise Immune System establishes a ‘pattern of life’ for the entities in your infrastructure – users, devices, clouds and containers, and uses this knowledge to identify anomalous activity.
The Threat Visualizer provides real-time visibility of your entire environment, it enables your team to focus on the highest-priority threats, while giving you the option to drill down into more detail

Cyber AI Analyst combines the expertise of world-class human analysts with the speed and scale of AI. Powered by various forms of machine learning, the Cyber AI Analyst learns from a rich data set built up over thousands of deployments. By learning how expert humans investigate threats, the Cyber AI Analyst augments human teams by forming hypotheses and reasoning to conclusions at a speed and scale that no human ever could, conducting expert investigations at machine speeds to provide automated, triaged threat reports
Darktrace AI is powered by unsupervised machine learning, which can uncover rare and previously unseen deviations in network behaviors. Unlike supervised approaches, unsupervised machine learning does not require labeled training data, and is able to identify key patterns and trends in the data without the need for human input.