Content-aware DLP solutions treat the symptom, but not the cause of data breaches. By identifying risks and potential security events based on employee activities and patterns of behavior, Risk Fabric delivers actionable intelligence into the root of an attack. This empowers DLP solutions and security teams to quickly identify potential issues, without impacting employee productivity.
"Traditional content-aware DLP systems provide technical information on an incident by incident basis to an organization's tech savvy Security and IT professionals," noted Eric Ouellet, Research Vice President at Gartner (Gartner Security and Risk Conference presentation " Workshop: So You Have A New Content-Aware Data Loss Prevention Solution... Now What?", Sept. 18-19, 2013). "In order to truly empower DLP within an organization, you need to go beyond the standard DLP system reports and consoles to bring in contextual information, such as behavioral characteristics and meaningful deviations from the norm around the event data. This allows companies to move away from information protection programs that deal with extraneous DLP incident response management work, and shifts the organization's focus to proactively managing insider behavior, while isolating and identifying malicious insider attacks."
Risk Fabric integrates into organizations' existing Content-aware DLP solutions and makes them smarter by delivering real-time context about users and their behavior throughout an incident workflow instead of after the fact, when it's too late. This context enables customers to identify suspicious, malicious and abnormal activity while focusing resources to more efficiently pursue actual threats.
Ouellet also wrote: "As DLP deployments evolve from reactive protection within the first couple of years of deployment to an advanced proactive-protection-based model, contextual information becomes a critical core component."
Risk Fabric analyzes, baselines and rates the risk associated with each employee as a result of their job role and access they possess. Without requiring an organizational chart or intensive upfront demographic configuration to define individuals' roles and permissions, the solution relies on advanced artificial intelligence algorithms to automatically identify and track users' roles based on activities and the volume, velocity and variety of sensitive data they interact with regularly. By understanding user behavior, Risk Fabric makes it easier to determine a company's risk exposure, evaluate insider threats, and reduce false positives that often render traditional DLP solutions ineffective.
"Once an attack penetrates an organization's perimeter, it becomes an insider threat, leveraging exploited users and attacking high value endpoints to access confidential and sensitive information," said Feris Rifai, CEO of Bay Dynamics. "Risk Fabric was designed with a user-centric approach to identify meaningful deviations in behavior. This is a significant step forward for clients who have made substantial investments in existing Content-aware DLP solutions, providing them with real information about user-based threats, so that they can focus on the ones that matter and filter out the ones that don't."
Risk Fabric federates data from information security silos and IT repositories enterprise-wide. It uses advanced algorithms to rate individuals' typical behaviors and interactions with information and computer systems against those of others within their department, level, and the entire company. It then uses machine learning to discern between event-based and threatening behavior deviations – providing customers with context on interactions between employees and data systems and whether the deviations are standard practice and approved. This enables companies to proactively monitor, manage, and mitigate risk in a proactive fashion.
Bay Dynamics' Risk Fabric has been proven in some of the largest financial institutions in the world, and is ready to provide deep visibility for quick corrective action, allowing any company to operate more securely and efficiently.
About Bay Dynamics
Bay Dynamics&trade helps the world's largest organizations turn enterprise data into actionable information risk intelligence – ensuring the integrity of sensitive information assets and making certain they are being used in a way that creates business value. Proven among the Fortune 50, Bay Dynamics leverages its unique technology to detect and expose deviations from the norm and provide clear data visualization for risk prioritization, proactive management, and actionable insight into any business. For more information, visit www.baydynamics.com.