You have been successfully attacked and you will continue to be successfully attacked.
You don’t know it because the software you are using to protect your endpoint machines and servers rely heavily on prior knowledge to identify an attack. New malware threats are being written daily, and targeted attacks created with the sole purpose of infiltrating the weaknesses of the specifc organizations are gaining access to sensitive data and intellectual property at unacceptable rates. Think of these attacks as the proverbial "bullet with your name on it".
It gets worse. Organizations have placed their emphasis on shielding machines from attack and have no solution in place to detect successful breaches. The "Verizon Business 2011 Data Breach Investigation Report" provides these numbers as proof:
- Less than 5% of breaches are detected in the first 24 hours
- Less than 40% of breaches are detected in the first 30 days
- Less than 6% of the breaches are detected by active discovery work by the IT security team
- 84% of breaches are discovered by a third party
Attackers are living on organizational systems for extended periods, mining valuable data and IP from critical systems and creating enormous organizational and reputational risk.
(Read the new white paper on Malware Detection and Remediation here)
Triumfant is an innovative approach to malware detection, using change detection to identify, correlate and assess changes to detect malicious activity, particularly new malware threats. This approach eliminates the reliance on prior knowledge - it does not matter how the attack got to your machine or the specific attack technique used. What does matter is that a successful infiltration by definition will change the attacked machine and when it does, Triumfant will see it. Period.
Triumfant goes beyond simple detection. Patented analytics group and correlate changes to provide a comprehensive view of the attack and the associated damage. Within minutes of infection, Triumfant creates detailed forensic data that it would take security analysts hours or even days to assimilate. Triumfant also builds a remediation that will stop the attack and surgically repair all of the damage to the machine.
Think about what this means to your organization - Triumfant diagnoses and repairs attacked machines in less than 5 minutes from the infection. This includes sophisticated zero day attacks and attacks specifically targeted at your machines. No rebooting, and no need to re-image the machine. That translates to no associated costs for re-imaging or lost productivity for the affected users.
Speak to us today and learn how Triumfant works and why you need to think beyond traditional protections.
top
Benefits
Reduces Risk
The ability of Triumfant to see the attacks that evade other endpoint protections closes a significant gap in endpoint security and provides organizations protection from the affects of those attacks:.
- Triumfant detects and remediates the new malware threats and targeted attacks that other protections cannot or do not see, creating a last line of defense against those attacks that make it through the traditional endpoint security tools.
- Triumfant reduces time to detect and respond to minutes from infection. Triumfant calls this Rapid Detection and Response. Note the use of infection, and not detection, as many products leave attacks undetected on machines for days, weeks, and even months.
- Triumfant continuously protects the endpoint population from newly discovered attacks until the proper course of action is determined in regards to updating the existing protections with the new knowledge about the attack.
Reduces Costs
Automating the detect/analyze/act cycle eliminates much of the human costs associated with addressing attacks and the continuous process of enforcing configurations.
- Triumfant reduces and often eliminates the costs of specialized security personnel to analyze the attack and build a remediation.
- Triumfant eliminates lost productivity waiting for human analysis and manual remediation.
- Triumfant eliminates the costs associated re-imaging infected machines.
Increases Situational Awareness.
The scan scope of Triumfant means that our solution continuously gathers and monitors more information than any other tool on the market. The Adaptive Reference Model built by our patented analytics has the secondary benefit of being the most extensive data store of granular endpoint data available. This information is available in actionable form through a broad catalog of reports as well as through an executive dashboard and alerts via email.
top
Features
- Sees all of the attacks on a machine, whether from malicious code or a maliciously intended insider by tracking all of the changes to the machine and identifying indicators of malicious activity. Triumfant’s patent pending analytics compare these indicators against the broader endpoint population to effectively eliminate false positives.
- While most anti-virus applications depend on signatures, Triumfant uses the industry's only granular change detection process to expose undesirable software components. This includes malicious applications that evade anti-virus protection as well as software components such as games, peer-to-peer programs, MP3s, videos, screensavers, etc. that consume resources and/or interfere with business applications.
- A successful attack leaves widespread damage such as file associations, altered security settings and personal firewall settings, and open ports. Anti-virus applications do not have the knowledge or sophistication to correct such problems, but Triumfant is able to synthesize a response on the fly that exactly matches the damage found in a particular machine. The result is a holistic, surgical remediation that affects only those attributes within a computer that are in error.
- Once an attack is identified for any given machine, administrators can use the information gained from addressing that machine to scan the endpoint environment for any other instances of the attack and apply the created remediation, effectively ending the threat to the entire organization in minutes.
top
