Security News > 2022 > April > Defending the endpoint with AI

Remember the good old days, when the only devices a company had to worry about were the PCs on its own network? Today, security teams must yearn for those times as they struggle to protect endpoint devices everywhere.

Darktrace is mirroring the approach it takes to security at the core of the network with an endpoint agent that uses machine learning to protect PCs. "The way we operate our businesses has changed so drastically over the last few years," says Justin Fier, the company's Director of Cyber Intelligence & Analytics.

Its self-learning mechanism can adopt a proportional response based on how serious it thinks the behavior is, ranging from quarantining an email through to cutting an endpoint off from the entire network.

The company needed to extend that visibility to disconnected endpoints, so it launched Darktrace Endpoint.

It is useful even when the endpoint is connected to the VPN, because it helps Antigena spot real-time endpoint issues while updating its self-learning corpus of network traffic.

Darktrace Antigena continues to protect other endpoint devices that don't have agents, such as Android and iOS systems, by monitoring their network traffic.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/04/01/defending_the_endpoint_with_ai/