At a certain point, almost every organization reaches the conclusion that there is a need to move past just the standard AV and firewall stack in order to soundly protect their environment.
The common practice in recent years is to gain extra protection through implementing either EDREPP solutions (represented by vendors like Crowdstrike and Carbon Black) or Network Traffic Analysis/NDR solutions (such as Darktrace and Vectra Networks). Fortune 500 companies who have large security teams, would usually choose to buy and implement both.
A recently published guide, ‘Advanced Threat Protection Beyond the AV’ (download here) is the first resource that not only guides security executives through the pros and cons of each solution type but also outlines a best-practice approach that allows the “non-Fortune 500” companies to combine the advantages of both approaches – without actually buying both.
The proliferation of advanced threats in the decade has gradually led CISOs and other security professionals to acknowledge that both perimeter protection, as well as signature-based endpoint protection, cannot protect against the sophistication and creation volume of polymorphic malware,…
http://feedproxy.google.com/~r/TheHackersNews/~3/1o2zloOqDFI/advanced-threat-protection-guide.html