Imperva Uses AI To Block AI-Weaponised Cyber Threats

  • New technologies increase information technology connectivity and vulnerabilities, but they can also be used to fight against these problems.

  • Imperva is positioning AI to fight against AI.

  • The company conducts data research to identify the pattern of attacks and how the threat landscape is changing.


The number of security events taking place each day has seen an exponential rise as more and more companies shift to new technologies to improve the operation and efficiency of their business models. But, new technologies can bring more threats to corporate security.


As these new technologies increase information technology connectivity and vulnerabilities, they can also be used to fight against these problems. Cybersecurity software maker Imperva Inc. uses artificial intelligence and machine learning to do threat analytics and predictive attack research for its clients.


In cybersecurity, staying one step ahead of the competition is a necessity. As malicious users start using AI systems in their products, cybersecurity must figure out how to adapt on the fly to combat these threats that have the potential to evolve. Imperva is positioning AI to fight against AI.


We are fighting against technologies like AI. But we are also using those technologies to help us decide where we need to continue to add capabilities to stop [cyberattacks].

- Pam Murphy, CEO, Imperva


Murphy discussed how Imperva uses data to protect consumers from security threats, the company’s focus on consumer needs.


READ MORE: Delivering on the promise of security AI to help defenders protect today’s hybrid environments

Blocking Out One Million Threats A Minute


Imperva has what it calls a “threat research group,” whose job is to assess data that passes through the company’s content delivery network. Imperva protects over 3 million databases and looks at about 25 petabytes of data daily, offering solutions in the cloud and on-premises.


Murphy mentioned that the company’s data collection centers get records for each attempted attack on a network that Imperva is protecting.  She said, “We get the benefit of basically seeing all that are hitting our customers every day. We block about 1 million attacks every minute.”


The collection of this data enables Imperva to analyze incoming sequences and determine what they’re looking at to figure out what part of their cybersecurity defense should be shored up. For example, the data allows Imperva to conduct research to identify the pattern of attacks and how the threat landscape is changing. According to Murphy, this guides the company to augment its products to prevent those attacks.


Before, a lot of the attacks were just sort of fast and furious. Now we’re seeing a pattern towards slow — slow and continuous.

- Pam Murphy, CEO, Imperva


Imperva is in a unique position to determine the needs of their clientele and respond to those requirements given access to vast volumes of data. By pushing the boundaries of cybersecurity innovation, Imperva intends to combine its data collection system with analytics to help them develop solutions that can be applied across the board.


Murphy wants to harness her knowledge of customer demand to perfect Imperva’s market approach. The idea is to deliver a more complete and integrated solution for enterprise customers. She said, “Our focus is on what do customers need rather than what software tech companies or security companies think that they need." The new approach involves making the tools easier to use and showing customers the breadth of the company’s solutions.


With a focus innovation, Imperva plans to launch a range of tools in the year ahead.


READ MORE: Five Ways Imperva Attack Analytics Helps You Cut Through the Event Noise

Spotlight

Other News
Data Security

GuidePoint Security Announces Portfolio of Data Security Governance Services

GuidePoint Security | January 30, 2024

GuidePoint Security, a cybersecurity solutions leader enabling organizations to make smarter decisions and minimize risk, today announced the availability of its Data Security Governance services, which are designed to help customers address the challenges of unstructured data and data sprawl through a proven process and program to meet their unique needs. GuidePoint’s Data Security Governance services consist of policies, standards, and processes leveraging the newest technologies to meet organizations’ data governance goals in both on-prem and cloud environments. Once the right strategy is determined with the customer, GuidePoint Security consultants will review program requirements, assess current policies and controls, perform gap analysis, design and develop/enhance the program, recommend and implement supporting technologies, and create operational processes and metrics. “Whether an organization is just beginning to build their data security governance program or needs help assessing and improving an existing program, our team and service capabilities are built to meet them at their current maturity level,” said Scott Griswold, Practice Director - Security Governance Services, GuidePoint Security. “We work side by side with the customer to conduct the necessary data discovery in their environment and provide tailored recommendations for solutions and processes to ultimately build/improve upon the data security governance program.” GuidePoint’s Data Security Governance Services include: Sensitive Data Cataloging: For organizations just getting started in the process of protecting their sensitive data, GuidePoint offers Data Identification workshops to identify sensitive data types in the environment, including trade secrets, intellectual property, and sensitive business communications. Data Security Governance Program Assessment: For organizations with existing Data Security Governance or Data Protection programs, GuidePoint Security experts will assess the program to identify policy non-compliance, gaps in data protection requirements—whether legal, regulatory, contractual, or business—and program maturity levels. Data Security Governance Program Strategy Development: The GuidePoint team will work with an organization's key stakeholders to design a program strategy aligned with relevant requirements. The outputs of this effort include delivering ongoing sensitive data discovery, automated classification and labeling, the application of required sensitive data protections, restrictions on where sensitive data can be stored and sent, and data retention policy enforcement. Merger and Acquisition Data Identification: This offering provides the ability to identify sensitive data within an M&A target or recent acquisition (including locations, amounts, and access rights) and then perform penetration testing on the storage repositories where that sensitive data exists to determine the risk of data compromise. About GuidePoint Security GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions that minimize risk. Our experts act as your trusted advisor to understand your business and challenges, helping you through an evaluation of your cybersecurity posture and ecosystem to expose risks, optimize resources and implement best-fit solutions. GuidePoint’s unmatched expertise has enabled a third of Fortune 500 companies and more than half of the U.S. government cabinet-level agencies to improve their security posture and reduce risk. Learn more at www.guidepointsecurity.com.

Read More