Threats are constantly evolving and, just like everything else, tend to follow certain trends. Whenever a new type of threat is especially successful or profitable, many others of the same type will inevitably follow. The best defenses need to mirror those trends so users get the most robust protection against the newest wave of threats. Along those lines, Gartner has identified technology for the immediate future. We wanted to dive into the newest cybersecurity products and services from those hot categories that Gartner identified, reviewing some of the most innovative and useful from each group. Our goal is to discover how cutting-edge cybersecurity software fares against the latest threats, hopefully helping you to make good technology purchasing decisions. Each product reviewed here was tested in a local testbed or, depending on the product or service, within a production environment provided by the vendor. Where appropriate, each was pitted against the most dangerous threats out there today as we unleashed the motley crew from our ever-expanding malware zoo. Give your career a boost with. Best security software, 2018 - Category: Vulnerability management Balbix may technically be a vulnerability manager, but it does it so much better and also so much more that it breaks the bounds of its category. It then compares each vulnerability with active threat feeds, and predicts the likelihood of a breach in the near future, as well as the loss or harm to the enterprise should it be successfully exploited. BluVector works almost right away, but also has deep machine learning capabilities, so it gets even smarter over time. It will learn the intricacies of each network that deploys it, tweaking its algorithms and detection engines in a way that makes the most sense for the environment. But it goes a step farther, adding the ability to launch threat hunts based on events, or simply anomalies. But it can also be used in a SaaS model, with the cybersecurity team at Alert Logic taking over most cloud-based cybersecurity functions. Triage is still evolving, but even now represents one of the most advanced defenses against phishing. The secret sauce is its use of bytecode instrumentation, a feature in Java used to help integrate programs and application features during development. It can also trap threats, holding them in place and rendering them harmless until a threat hunter can arrive to investigate. Everything from lighting controllers to HVAC units can be discovered and managed. It is designed to both make sense of regulatory and technical guidelines and ensure that a network is protected according to those rules. It pulls information from a series of network collectors and correlates that data into a continuously-monitored compliancy dashboard. This comparison doesn't do the program justice, but is a good starting point for understanding how it works. While the program provides robust threat hunting tools for use by clients, the company also employs a team of experts to hunt on their behalf. Ping Identity offers a good alternative to these two scenarios. Digital Footprint scans for vulnerability information from outside the firewall, just like a potential attacker would. Thrifty firms may want to consider eliminating some of their other cybersecurity programs if they duplicate what the OTM is doing, especially if the OTM is consistently catching what they miss. And because those agents are capable of acting independently, they can respond instantly as attacks happen, later sharing that information with human security teams for analysis. Best security software, 2017 — Category: Deception Deception is an emerging field, and some of the drawbacks preventing easy, useful deployments are still being worked out. Acalvio ShadowPlex addresses some of those problems, offering clients unlimited deception assets without constant overhead or maintenance. The Attivo platform offers quick response capabilities and the ability to interact with third-party programs for additional backup, configured using an intuitive drag and drop interface that requires very little training. The WAF functions like a reverse proxy and is placed at the front of the data pathway. By adding real context to raw scan results, IT teams are given a much better picture of the true risks hiding within their networks, including the potential costs if those problems are not fixed quickly. Customers who make use of the program can elect to use one of two flavors of the product: A public instance that identifies threats and provides detailed information about how customers can patch their own networks, and a private instance that runs threats against a mirror network. All of the attacks that it can load or create are real, using actual techniques and tactics that have historically broken through cybersecurity defenses at many organizations. Cyphon was first created, to be used internally by the company to protect its assets. After that, rolling it out as service to clients easily fit into their protection-as-a-service model. GreatHorn was designed to close that security gap, as well as lock down the rest of the mail stream. Authorizing every process, app, user and service within a network, and what each of them can do and how they can interact, while denying everything else, is a heck of a gauntlet to throw down. The GuardiCore Centra solution eliminates much of the complexity normally associated with micro segmentation from the initial installation to ongoing program management. Even within our admittedly tiny test environment, the benefits of the InfoZen toolset and automatic processes were obvious. In a nutshell, it monitors most major threat feeds, and compares that data with assets inside a protected network. Keeping a cloud secure is even more difficult. Lacework helps to filter all the chaos, removing false positives, and generating actionable threat intelligence in real-time for IT teams tasked with keeping their clouds secure. The idea is that most normal threats will be blocked by traditional antivirus and Minerva will stop anything that attempts to get around that protection. Promisec can provide that help, wrestling endpoints into compliance, automatically if desired, and keeping a watchful eye over them to ensure they stay that way. The problem was that while RedSeal originally did manage firewalls, their product has now evolved into something else. RedSeal shares some similarities to firewall managers, but is now in a separate, unique product group. We dig into how it works. Adding a tool like ThreatConnect, which can bridge the gap between theoretical threat information and the real world, is an invaluable tool for managing and optimizing detection and response capabilities. Here's a look at how XebiaLabs helps navigate DevOps deployments and operations.
