Defenses

Traditional Defenses

Vulnerability patching.

Firewalls.

• Centralized.

• Distributed.

Intrusion Prevention and Detection Systems (IDS/IPS).

Antivirus.

All rely on previous knowledge of the threat and/or problem !

"Inteligent" Defenses

Detection of unknown threats and/or problems.

Application of Big Data and Data Science techniques to networks and systems monitoring data.

Some traditional solutions have started to incorporate AI into their equipment.

• E.g: Palo Alto Network Firewalls, Cisco Appliances.

Still limited to manufactures-based solutions and localized data.

Still limited in scope.

• Obvious threat vs. Stealth threat.

Optimal deployment requires overall network and systems knowledge.

• Network and Systems (Cyber) Situational Awareness.