Cyberhaven Has Released a Data Detection And Response Solution to Counter Insider Attacks

Highlights:

• Insider risks are so prevalent that over the course of six months, nearly one in ten (9.4%) employees will exfiltrate data.
• Cyberhaven has just released the Insider Threat Technology, which it says is the only data detection and response (DDR) platform in the industry that can stop data leaks in real-time.

The worst dangers frequently originate internally. Employees can cause a data breach that costs millions of dollars – by clicking on phishing emails, choosing weak passwords or even selling credentials to third parties.

Unfortunately, there aren’t many options for dealing with careless or malicious insiders that leak sensitive data.

Therefore, Cyberhaven has just released the Insider Threat Platform, which it says is the only data detection and response (DDR) platform in the industry that can stop data leaks in real-time.

The solution can immediately stop an intruder from stealing data and can detect data misuse. This strategy enables businesses to lessen the possibility of dishonest and careless insiders leaking information, either by themselves or by granting access to the environment to other threat actors.

In brief, the corporation claims it offers superior protection for intellectual property and other high-value data.

Insider threats are genuine threats!

The announcement coincides with the rise in insider risk as a danger to corporate data. Insider risks are so prevalent that nearly one in ten (9.4%) employees will exfiltrate data over six months.

Generally, client data (which accounts for 44.6% of cases) and source code (13.8%) are the two most often stolen types of sensitive data.

Employee access to vital information also becomes a serious concern when changing jobs.

Howard Ting, Cyberhaven CEO, stated, “Over the past few years, we’ve witnessed a surge in employees moving jobs, and in many cases bringing their former employer’s IP with them when joining a competitor. Companies across industries increasingly have to deal with employees and contractors working on behalf of foreign adversaries swiping product designs and data about users.”

These insider threats frequently result from innocent mistakes made by users with privileged access, rather than malicious behavior.

Ting said, “I think we’ve all shared something using a collaboration tool or email and as you type in the recipient’s name, it autocompletes to the wrong person, and in a rush, you click send.”

Cyberhaven’s solution to this problem is to utilize its graph engine and data lineage to learn more about how users act and what data is considered sensitive. It’s a way to find and stop insider risks automatically and let security teams know about them.

DLP and data-centric security solutions

The market for data-centric security, which analysts assess at USD 3.39 billion in 2020 and predict will reach USD 17.12 billion by 2028, is where Cyberhaven’s new product fits loosely.

One of the primary rivals of Cyberhaven is Forcepoint, which provides a Data Loss Prevention (DLP) solution with real-time user behavior audits, behavioral analytics and unified policy enforcement.

Another rival is Symantec, which has a DLP solution that can recognize data in both on-premises and cloud environments to prevent its real-time exposure.

Ting claims that Cyberhaven’s preventative features set it apart from the competition.

Ting said, “One of the things we hear from customers over and over is they don’t just want to be alerted to insider threats, they want to stop them, and that’s what our product does. Before now, security products looked at data and behavior in isolation, and by analyzing both together, we’re able to much more accurately detect when there’s an insider threat.”