scalecomodo官网

BUYER'SGUIDETOENDPOINTPROTECTIONPLATFORMSIN2020:FEATURESYOUNEEDFORREAL-WORLDSECURITYINTODAY'STHREATLANDSCAPEAfterall,themajorityofenterprisedatabreachesbeginwiththecompromiseofanendpointdevice—morethan70%ofthem,accordingtodatafromIDCResearch.
1AndasbusinessITenvironmentsgrowincreasinglycomplex,incorporatinggrowingnumbersofendpointsandnewdevicetypes,theriskthatoneofthesedeviceswillbecomeanattacker'sentrypointisskyrocketing.
Choosingtherightsolutiontoprotectyourorganization'sendpointsisnoeasytask,however.
Thoughthevastmajorityofcompanieshavealreadyimplementedsometypeofendpointprotection,therateatwhichdatabreachesareoccurring,alongwithhowmuchtheseeventsarecostingtheirvictims,continuestoclimb.
ThePonemonInstitutereportstheaveragetotalcostofadatabreachintheUnitedStatesnowtops$3.
9million.
2ButdespitethefactthatoverallITspendingisatanalltimehighandthereIT'SNOSECRETTHATENDPOINTPROTECTIONISTHEMOSTCRITICALCOMPONENTINYOURITSECURITYTECHNOLOGYSTACK.
arehundredsofendpointsecuritytoolsavailable,actualriskexposurehasincreased.
3What'sneededtoreversethistroublingtrendisamindsetshift.
ThemostsuccessfulITsecurityleadersarethosewhohaveadopted—anddesignedtheirarchitecturesinaccordancewithaZeroTrustParadigm.
IntheZeroTrustmodel,internal'trusted'zoneswithnetworksareabolishedbecausenothingshouldbetrustedunlessithasbeenprovensafe.
Instead,ongoingverificationandmonitoringandomnipresentsecuritycontrolsareimplemented.
KeepingZeroTrust'scentralpremiseinmind—thatnodataornetworktrafficistobedeemed"secure"withoutverification—andconsideringthekeytrendsandemergingchallengesthatorganizationsmustcontendwithastheybuildtheirsecurityinfrastructures,wecanidentifythemostimportantelementsanendpointprotectionplatformneedstoincludeifitistodeliverpositivereturnoninvestment(ROI)andboostresilienceagainsttoday'sattacks.
PAGE2visitcomodo.
comFORTRULYCOMPREHENSIVEANDROBUSTDEFENSEINTHECURRENTTHREATLANDSCAPE,ANADVANCEDENDPOINTSOLUTIONMUST:Bepurpose-designedforuseinZeroTrustenvironmentsandofferameansofcontaining100%ofunknownfilesandruntimeexecutables.
Integratemultiplemethodsofdetectingmalwareaswellasmaliciousscriptsandfilelessattacks.
Seamlesslyextendvisibilityandcontrolacrossmultipledevicetypesandplatforms.
Simplifydeploymentandmonitoringwithacloud-nativearchitecture.
Combinethecapabilitiesofexperthumananalystsandadvancedalgorithm-basedanalyticstomaximizeitsabilitytodetectmaliciousactivitiesquickly.
12345Theprimaryreasonbusinessesaren'trealizingthevaluethey'dhopedforwheninvestingintoendpointprotectionplatformsisthatattackersareconstantlyevolvingtheirtechniquesandstrategies,andthevendorsoftraditionalendpointsecuritysolutionshaven'tbeenabletokeeppace.
It'scriticallyimportantthatyouchooseanadvancedendpointprotectionplatformdesignedfortoday'scloud-based,distributedanddiverseITarchitectures—notthelegacyenvironmentsofyesterday.
And,it'svitalthatyourendpointprotectionofferpowerfuldefensestocountertheattackstrategiesthatarecurrentlyinwidespreaduse—aswellasproactivesafeguardsagainstwhateverthefuturemaybring.
Let'stakealookatthetopcybersecuritytrendsof2020,andhowtheytranslateintomust-havefeaturesforyourendpointprotectionplatform.
FIVEKEYCYBERSECURITYCHALLENGESOF2020:CHOOSETHERIGHTADVANCEDENDPOINTPROTECTIONPLATFORMPAGE3visitcomodo.
comATTACKERSARETAKINGGREATERADVANTAGEOFARTIFICIALINTELLIGENCE(AI),MACHINELEARNING(ML),ANDPREDICTIVEMATHEMATICS.
DEFENSESMUSTEVOLVEALONGWITHTHEM.
Thoughautomationcanbringnumerousbenefitstobusiness,it'salsogivingrisetonewkindsofattacks.
Automationmakesiteffortlesstolaunchattacks,likecredentialstuffing,thatarechallengingtoaccomplishmanuallyonalargescale.
Itenablessophisticatedmalwarestrainsto"learn"aboutsystems'typicalbehaviorsotheycandwellundetectedinenterprisenetworksformonthsoryears.
And,itmakesitpossibletoputtirelessmachinestoworksiftingthroughenormousamountsofdatainsearchofsoftwarevulnerabilities.
Securityexpertsarecurrentlyseeingdramaticincreasesinthevolumeofautomation-basedattacks,andthemathfavorstheirsuccess.
4Inordertobesuccessful,defendersmuststop100%ofattackstopreventtheirnetworksfrombeingbreached.
Ifattackerssucceedonlyonetimeinevery10,000attempts,they'llstillendupcompromisingyourenvironment.
TheriseofautomatedattackshasmadeitmorepressingthanevertoimplementZeroTrustprinciplesinallITenvironments,regardlessofbusinesssizeorvertical.
Vendorsofbothlegacyantivirussolutionsandnewer,behavior-basedmalwaredetectionplatformshaveboastedthattheirproductscandetectandblockasmanyas99%to99.
9%ofattacks.
Whenyou'reconfrontingthesheervolumeofattacksthatautomationfacilitates,however,thesedetectionratesaregrosslyinadequate.
WHATYOUNEEDINANENDPOINTPROTECTIONPLATFORM:BUILT-INZEROTRUSTCAPABILITIESAnauthenticZeroTrust-basedapproachisonethatpreventsunknownfilesfromexecutingatalltimes.
ThisincludesPowerShellscriptsandotherfilelessattacks,aswellastraditionalmalicioussoftwarefiles.
Ifasolutionallowsunknownfilestoexecuteinordertotesttheirbehaviorandthendetermineswhetherornotthosefilesarepotentiallymalicious,yourenvironmentisputatriskeachtimeitsdecision-makingprocessoperates.
Lookforasolutionthatcontainsallunknownfilesimmediatelyinavirtualizedsandboxenvironment,allowingthemaccesstohostsystemresourcesandfilestoresonlyafterthey'vebeendeemedsafethroughacomprehensiveverdictingprocess.
Ideally,verdictingshouldbequick,andperformance(andwithit,enduserexperience)unaffectedbythecontainmentprocess.
1PAGE4visitcomodo.
comRANSOMWAREISSTILLONTHERISE,ANDCRIMINALSAREBECOMINGMOREANDMORESOPHISTICATEDWHENITCOMESTOCHOOSINGTHEIRTARGETS.
Ransomwareattacksareestimatedtohavecostglobalbusinessesover$11.
5billionin2019,5andexpertssaythatabusinesswasattackedevery14secondsattheendof2019.
It'sforecastthatanattackwilloccuronceevery11secondsbylate2020.
6AlthoughtheFBIclaimsthatthesheervolumeofransomwareattacksisactuallystable,theirsuccessrateismuchhigherthaneverbefore,alongwiththeamountofmoneyextortedbycriminals.
7Theseattackscanarriveviadrive-bydownload,throughmaliciousemailattachments,orfromusersclickingoninfectedlinks.
Someransomwarestrainstargetknownsoftwarevulnerabilities,whileothersarenovelzero-dayexploitsthatwouldn'tbedetectedbylegacysignature-basedanti-malwareprograms.
WHATYOUNEEDINANENDPOINTPROTECTIONPLATFORM:MULTIPLEMETHODSOFDETECTINGMALWAREANDFILELESSATTACKSSignature-basedblacklistingoffilescanstillbeeffective,particularlyasafirstlayerofdefense.
It'squick,soitoffersamethodofrapidlyblockingknownmalware.
Tooffersignificantprotectivevalue,however,blacklistingshouldbeusedinconjunctionwithmultipleothermethodsoffileverdicting.
Theseincludebehavioralanalysis,inwhichthefile'scharacteristicsandruntimebehaviorareanalyzedinadecisioningenvironmentwheretheycanposenothreattoyoursystemsornetwork.
Fullyaccuratedecisionscanbereachedonlywhenexperthumansecurityanalystsareavailabletoexaminethesmallpercentageoffilesthatrequireadditionalinvestigation.
Becausealargenumberofsuccessfulransomwareattacksareexecutedthroughscriptsormemory-residentartifactsthatdon'tinstallanyfilesontothecompromisedendpoint,thesolutionshouldbedesignedtoblockthesetypesofthreatsjustaseffectivelyasitdoestraditionalmalwarefiles.
2PAGE5visitcomodo.
comWHATYOUNEEDINANENDPOINTPROTECTIONPLATFORM:VISIBILITYANDCONTROLACROSSMULTIPLEDEVICETYPESANDPLATFORMSAsenterprisecomputingenvironmentsevolvetoincorporateanever-broadervarietyofdevices,lookforanendpointprotectionplatformthatsupportsnotonlyWindowsandOSX,butalsoiOS,Android,WindowsServer,andLinuxdevices.
Besurethatthesolutioncanmonitorfor—andblockinterferencewith—criticaloperatingsystemactivitiesonalltypesofdevices.
Andverifythatapplicationactivitiesandsystemprocessescanbemonitoredfromasingle,easy-to-usedashboardinterfaceacrosscomplexnetworkenvironments.
3ENTERPRISENETWORKSAREGROWINGINCOMPLEXITYANDDIVERSITY,INCORPORATINGMOREDEVICETYPESANDPERFORMINGMOREPROCESSINGATMORESITES.
Thetwodevelopmentsmostlikelytoreshapeenterprisecomputingenvironmentsintheearlypartofthenewdecadearethearrivalof5Gmobiledatanetworksandincreasinguseofedgecomputing.
Although5Gcellularnetworksfirstbecameavailablein2019,connectivityremainsexpensiveandlimitedtomajormetropolitanareas.
Thiswillchangein2020,asdramaticincreasesincoverageacrossthecountryareonthehorizon.
With5Gdatanetworkswillcomeanexplosionindemandfor"bringyourowndevice"(BYOD)supportandever-greaternumbersoftabletsandmobiledevicesconnectingtocorporateITenvironments.
Atthesametime,enterprisenetworkswillbechallengedtoincorporateincreasingnumbersofconnecteddevices,including"smart"sensorsandon-sitecomputingdeviceswithenoughprocessingpowertotranslatethedatatheycollectintobusinessintelligence.
Takentogether,thesetrendsmeanthatthenumberofendpointsthatITdepartmentswillneedtosecureispoisedtogrowastronomically.
Largernumbersofconnecteddevicesmakethechallengeofprovidingeffectivecentralizedmanagementexponentiallymorecomplex.
PAGE6visitcomodo.
comBUSINESSESOFALLSIZESAREACCELERATINGTHEIRMOVETOTHECLOUD,BUTSECURITYINFRASTRUCTURESARENOTALWAYSKEEPINGPACE.
Foramajorityofenterprises,thejourneytothecloudisproceedingatbreakneckspeed.
ThemarketforcloudinfrastructuresandservicesisgrowingthreetimesasfastasanyotherbranchofIT,andforecastersanticipatethatthispatternwillcontinue.
8Still,cloudmigrationprojectsarenotoriouslycomplex,andit'snotuncommonforsecuritychallengestobecomearoadblocktoprogress.
Relativelyfeworganizationsmaketheleapstraighttoasinglepubliccloudprovider.
Formost,buildinghybridormulti-cloudenvironmentsmakesthemostsense,butthis"bestofbothworlds"approachcanmakemaintainingcontrolandvisibilityenormouslychallenging.
WHATYOUNEEDINANENDPOINTPROTECTIONPLATFORM:CLOUD-NATIVEARCHITECTURESimplyput,legacyendpointprotectiontoolsweren'tdesignedfortoday'scloud-readydigitalbusinessenvironments.
Acloud-nativearchitecture,inwhichtheplatformautomaticallyandcontinuouslyupdates,simplifiesdeploymentandallowsallusers,acrossthewholeofyourorganization,tobenefitsimultaneouslyfromtheverylatestthreatintelligence.
Intoday'smostadvancedsolutions,accesstoacloud-basedfileverdictingplatformmeansthatexperthumancybersecurityresearchersareonhand24x7toexamineanyfilesthatwarrantthistypeofinvestigation.
4PAGE7visitcomodo.
comWHATYOUNEEDINANENDPOINTPROTECTIONPLATFORM:ACCESSTOEXPERTHUMANANALYSTSLookforanendpointprotectionsolutionthatincorporatestheintelligenceofhumansaswellastheefficiencyofmachines.
Throughthecombinationofinitiatingautomatedactionstohandlethemoststraightforwardtasks—filelookup,behavioralvirusanalysis,staticanddynamicfileinvestigation—andcallinginexpertresearchersinmorecomplexcircumstances,asolutioncanbalancespeedandthoroughnessinitsdetectionprocedures.
5ATTACKERS'DWELLTIMESARELONGERTHANEVERBEFORE,ANDASACONSEQUENCE,DATABREACHESARECOSTLIER.
AccordingtothePonemonInstitute,theamountoftimebetweentheonsetofadatabreachandthemomentofitsdiscoverygrewby4.
9%toanunprecedented279daysin2019.
9Asinpreviousyears,thefasterabreachcanbeidentifiedandcontained,thelowerthecostsassociatedwithit.
Yettheautomatedtoolsinuseintoday'sITenvironmentsdoapoorjobofidentificationandcontainmentwhentheircapabilitiesarenotaugmentedwithexperthumanmonitoring.
PAGE8visitcomodo.
com7VITALQUESTIONSTOASKYOURPROSPECTIVEVENDOR1.
Willthissolutionrunonallthedevicesinmyenvironment2.
Howlongwilldeploymenttake3Whatwillthemembersofmyteamneedtoknoworlearninordertoworkwiththisplatform4.
Whattypesofpreventativecontrolsareinplace5.
Fromwheredoesthevendorgetitsthreatintelligence6.
HowdoesthissolutionintegratewithincidentresponseworkflowsIs24x7professionalsupportavailablefromthevendor7.
Canthissolutionbeintegratedwithothersecurityservices,products,orplatformsfromthesamevendortoreducecostsandcomplexityCONCLUSIONEndpointsecurityhasneverbeenmorecomplex—ormorechallenging—thanitistoday.
Giventhenumberofvendorsandsolutionsonthemarket,itcanbeexceedinglydifficulttosortthroughallthecompetingclaimstofindwhat'strulyeffective.
Unlikeanyothersolutionavailabletoday,Comodo'sAdvancedEndpointProtection(AEP)platformusesonpatent-pendingauto-containmenttechnology,whichconfinesunknownfilesandruntimestoavirtualizedsandboxenvironmentwherethey'renotgivenaccesstohostsystemresourcesoruserdata.
It'suniquelylightweight,operatingwithoutimpactonperformanceorenduserexperience.
Plus,ComodoAEPwaspurpose-builtforuseinZeroTrustarchitectures.
Comodo'scloud-nativeendpointprotectiontechnologywasdesignedspecificallytoaddressthechallengesinherenttotoday'scomplexanddiverseenterpriseITenvironmentsandthesophisticatedthreatstheyconfront.
Itincludesautomatedfileverdictingcapabilitiestodeliverrapidresultsaswellasaccesstocloud-basedresourceswhenmoredetailedinvestigationsarewarranted.
Comodo'steamofexpertsecurityanalystsandthreatresearchersisstandingby24x7tohandlethemostcomplexcases.
Noonecanbecertainwhatthefuturewillbring.
Butwe'reconfidentthatthepowerofourtechnologyandthescalabilityandflexibilityofthecloudwillenableustocontinuedetectingnewandemergingattacktactics,andblockingzero-dayexploits—beforeanyofourcustomerssuffersabreach.
PAGE9visitcomodo.
comABOUTCOMODOCYBERSECURITYInaworldwherecyberattacksareinevitable,ComodoCybersecurityprovidesactivebreachprotectionwithitscloud-delivered,ZeroTrustplatformv.
TheComodoDragonplatformprovidesaZeroTrustsecurityenvironmentthatverdicts100percentofunknownfiles.
Theplatformrendersanalmostimmediateverdictonthestatusofanyunknownfiles,soitcanbehandledaccordinglybysoftwareorhumananalysts.
ThisshiftfromreactivetoproactiveiswhatmakesComodoCybersecurityuniqueandgivesthemthecapacitytoprotectyourbusiness—fromnetworktothewebtocloud—withconfidenceandefficacy.
Comodohasexpertsandanalystsin185countries,protecting100millionendpointsandserving200,000customersglobally.
BasedinClifton,N.
J.
,ComodoCybersecurityhasa20-yearhistoryofprotectingthemostsensitivedataforbusinessesandconsumersworldwide.
PAGE10visitcomodo.
comENDNOTES1.
https://blog.
rapid7.
com/2016/03/31/idc-says-70-of-successful-breaches-originate-on-the-endpoint/2.
https://databreachcalculator.
mybluemix.
net/executive-summary3https://www.
forrester.
com/report/Justify+Security+Budget+By+Its+Impact+On+Maturity/-/E-RES1364534.
https://www.
wired.
co.
uk/article/ai-cyberattack-mike-lynch5.
https://www.
coveware.
com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread6.
https://cybersecurityventures.
com/global-ransomware-damage-costs-predicted-to-exceed-8-billion-in-2018/7.
https://www.
ic3.
gov/media/2019/191002.
aspx8.
https://www.
gartner.
com/en/newsroom/press-releases/2019-04-02-gartner-forecasts-worldwide-public-cloud-revenue-to-g9.
https://databreachcalculator.
mybluemix.
net/executive-summaryPAGE11visitcomodo.
comBUYER'SGUIDETOENDPOINTPROTECTIONPLATFORMSIN2020:FEATURESYOUNEEDFORREAL-WORLDSECURITYINTODAY'STHREATLANDSCAPE