Risk is a condition that pre-exists an incident. If you reduce security risk, you will reduce security incidents. Epiphany is a new risk detection and quantification platform that highlights, qualifies and quantifies the risks that occur within the technical structure and users of a network, giving the security team the opportunity to eliminate the risk before an incident.
The Epiphany Intelligence Platform from DigitalWare gathers information on the IT infrastructure and its users, and then uses adversarial modeling and countermeasure analysis to locate risks and quantify the likelihood of adversarial success against that risk. In this way, it can be seen as automatic risk triaging in the same way as analysts manually triage alerts -- but before the alert stage is reached.
The system gathers information on every node on the network, examining both its users and connections to other nodes. With its knowledge of exploits and vulnerabilities, Epiphany can plot a potential attacker's route from entry to target asset, and measure the success likelihood of this route being exploited.
The results are reported in a manner that will be as meaningful to business leaders as they are to security leaders. For example, at one level risk is measured and reported as a success percentage: a risk given a success rate of 70% or above is a serious risk that needs to be remediated immediately. Anything measured at 30% or below could be left until more time is available. But from this very high level, the reporting can drill down to individual nodes or assets and show how they can be exploited for network traversal.
An example of Epiphany's risk detection can be found in phishing. Phishing is a risk that cannot be eliminated. However, E ..
Support the originator by clicking the read the rest link below.
