Federal Tech Podcast: for innovators, entrepreneurs, and CEOs who want to increase reach and improve brand awareness

Ep. 62 Advances in Threat Detection and Response

Apr 11, 2023

In this podcast, Chris Howard from Vectra discusses how their company applies Artificial Intelligence to the world of cybersecurity. They have developed techniques to understand insider threats and use Attack Signal Intelligence to isolate and respond to malicious actors. The podcast also highlights the importance of understanding data in threat detection, continuous improvement in software development, data exfiltration monitoring, and advances in threat detection and response.

Ask episode

Chapters

Transcript

Episode notes

Introduction

00:00 • 4min

Understanding Data for Threat Detection and Response

04:29 • 7min

Continuous Improvement and Continuous Testing in Software Development

11:23 • 2min

Data Exfiltration Monitoring and Cloud Service Provider Partnerships

13:03 • 3min

Advances in Threat Detection and Response

16:13 • 9min

Out of all the phrases that technology has generated in the past ten years, I think I like the phrase, "cloud washing" the most. The concept is that a traditional company would promote itself as always being cloud native. Kind of like being a Monday morning quarterback.

In 2023, the variation on that theme is "Artificial Intelligence washing." Now that AI is a trending phrase you can see technology websites suddenly claiming the long history they have with artificial intelligence, or, what may be called, "artificial intelligence washing."

This brings us to today's interview with Chris Howard from Vectra. The company has been knee-deep in Artificial Intelligence since 2010. As Chris explains, they have honed that knowledge to be able to apply it to the world of cybersecurity.

During the interview, Chris explains how Vectra deals with an insider threat. They have focused on techniques to understand how an insider moves within a network. The overall approach to this is what Vectra calls "Attack Signal Intelligence."

Without divulging proprietary information, Vectra has proven itself to be able to isolate and respond to a variety of malicious actors. Essentially, they have trained AI to think like an attacker and give the appropriate defensive response.

Chris describes a case study where a person was let into the network with appropriate credentials as a test to see Vectra's capabilities. Merely by watching behavior, the algorithms from Vectra were able to isolate the malicious actor.

Realistically, attacks are so prevalent that defense is almost impossible for a human without an automated tool. The safety provided by Vectra doesn't stop with the installation of the Vectra platform. It has been designed to continuously learn new threats and respond accordingly.

Listen to the interview to gain a better understanding of an advanced way to handle cyber threats.

Follow John Gilroy on Twitter @RayGilray

Follow John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/

Listen to past episodes of Federal Tech Podcast www.federaltechpodcast.com