Virtual Event: Threat Detection and Incident Response Summit - Watch Sessions
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Protection

CyberArk Launches Solution to Spot Attacks in Progress

CyberArk, a provider of enterprise security solutions that help companies secure and manage privileged accounts, announced a new solution this week that was designed to detect malicious privileged account behavior and stop attacks in-progress.

CyberArk, a provider of enterprise security solutions that help companies secure and manage privileged accounts, announced a new solution this week that was designed to detect malicious privileged account behavior and stop attacks in-progress.

Dubbed CyberArk Privileged Threat Analytics, the solution provides targeted and actionable threat analytics on critical attack vectors by identifying malicious privileged user behavior, the company said.

CyberArk Logo

Privileged accounts are increasingly being targeted in both internal and external advanced enterprise attacks, however, organizations are not implementing best practices around these accounts, according to a survey from CyberArk earlier this year.

CyberArk Privileged Threat Analytics is the latest innovation in the company’s flagship privileged account security solution, and provides benefits which Include:

• Identifies in-progress external attacks and malicious behavior of authorized insiders;

• Detects a range of anomalies in the behavior patterns of individual privileged users in real-time, such as a user who suddenly accesses credentials at an unusual time of day. 

• Improves effectiveness of SIEM systems and incident response teams by reducing false positives;

Advertisement. Scroll to continue reading.

• Stops an in-progress attack earlier in the kill chain, ensuring a less costly and time consuming remediation process;

• Learns user behavior and adjusts risk assessments based on the authorized privileged user activity patterns.

“Privileged user behavior profiling can be a critical weapon in combating both external and internal threats by discovering abnormal behavior early,” said Charles Kolodgy, Research Vice President for IDC’s Security Products service. “The key to CyberArk’s inventive solution is to analyze the right data – that being the activities of privileged user accounts – providing high value, actionable intelligence on a critical attack vector.”

“Organizations must assume attackers have already penetrated the perimeter and once inside, will almost always attempt to take control of privileged accounts to advance their attack,” said Roy Adar, vice president of product management, CyberArk. “Customers are asking for controls on privileged accounts, coupled with the ability to detect suspicious activity to protect their organizations from evolving threats.”

CyberArk Privileged Threat Analytics is scheduled to be available in December 2013.

Written By

For more than 10 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is the Director of several leading security industry conferences around the world.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.

Register

Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.

Register

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Data Protection

The cryptopocalypse is the point at which quantum computing becomes powerful enough to use Shor’s algorithm to crack PKI encryption.

Artificial Intelligence

The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...

Identity & Access

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the...

Compliance

The three primary drivers for cyber regulations are voter privacy, the economy, and national security – with the complication that the first is often...

Cybersecurity Funding

Los Gatos, Calif-based data protection and privacy firm Titaniam has raised $6 million seed funding from Refinery Ventures, with participation from Fusion Fund, Shasta...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...