Cyber AI Analyst augments human security teams and reduce triage time by 92%.
Darktrace has announced the launch of the Cyber AI Analyst, a new technology that emulates human thought processes to continuously investigate cyber-threats at machine speed. With the power to transform the security industry, early adopters of this technology reported a 92% reduction in the time required to investigate threats and provide conclusions to executives.
The self-learning AI is modelled on the human immune system and used by over 3,000 organisations to protect against threats to the cloud, email, IoT, networks and industrial systems. This includes insider threat, industrial espionage, IoT compromises, zero-day malware, data loss, supply chain risk and long-term infrastructure vulnerabilities.
This ground-breaking innovation is the culmination of over three years of research at the Darktrace R&D Centre in Cambridge, UK. Using various forms of machine learning, including unsupervised, supervised, and deep learning, the technology learned human intuition and trade craft from more than 100 world-class cyber analysts across thousands of customer deployments.
Typically, a human analyst will spend anywhere between half an hour and half a day investigating a single suspicious security incident. They look for patterns, form hypotheses, reach conclusions about how to mitigate the threat, and share the findings with the rest of the business. Darktrace’s Cyber AI Analyst accelerates this process, continuously conducting investigations behind the scenes and operating at a speed and scale beyond human capabilities.
“Darktrace’s Cyber AI Analyst quickly presents security information in a format that’s both elegant and intuitive,” commented Chris Kissel, research director, IDC. “By automatically investigating security events, the AI Analyst helps reduce noise more than any other technology. This is an important development in the security industry.”
“These are exactly the kinds of security insights my team wants to have at their fingertips,” commented Dan McNamara, CTO, Medreview. “Automating as much of incident response as possible is the end-game. The AI Analyst is the obvious next step and a clear evolution of the Darktrace platform.”
By learning from the millions of interactions between Darktrace’s expert analysts and Darktrace’s flagship solution, the Enterprise Immune System, the Cyber AI Analyst combines human expertise with the consistency, speed, and scalability of AI. The ability of AI to investigate every possibility, make connections between seemingly disparate events, and quickly illuminate the full scope of a security incident dramatically reduces ‘time to meaning’ and buys back time for human teams.
“The burden of investigating threats typically falls on the shoulders of a small number of trained security professionals,” commented Mike Beck, global head of threat analysis, Darktrace. “With Cyber AI Analyst, security teams can now rely on AI to investigate hundreds of threats at once, allowing human analysts to focus on the most strategic work.”