Security teams turn to AI to fight hackers

Cisco: CISOs rely on machine learning and automation to combat increasing threat volumes

Security teams are increasingly reliant on machine learning and AI tools to cope with the sheer volume of security threats they face, according to new figures.

More than 70% of 3,600 organisations across 26 countries said they were mostly or entirely reliant on AI, automation and machine learning in order to help cope with the amount of threats faced by businesses, according to Cisco's 2018 Security Capabilities Benchmark Study, released today.

The high volumes of intrusion attempts made on many organisations - in the UK, for example, councils face an average of 27 attacks per minute - often result in huge volumes of event logs, which can be impossible to sift through by hand. This task is made even more difficult by malware that uses encrypted traffic - in which Cisco researchers saw a 300% increase over 12 months.

Instead, many businesses are turning to AI tools, the network vendor claimed, because these can automatically learn what is and is not a normal event, and flag high priority items to security staff.

Advertisement - Article continues below
Advertisement - Article continues below

Similarly, behavioural analytics tools can automatically detect what a given user's normal behaviour is and can identify when an account is acting suspiciously, which may indicate a compromised account or a malicious insider. A total 92% of security professionals said these tools work either very or extremely well.

In order to try and cope with the growing breadth and scale of attack attempts, organisations are deploying an increasing number of tools.

A quarter of respondents to the study reported using security products from between 11 and 20 vendors, an increase of 7% from the previous year. The number of organisations using between 21 and 50 vendors more than doubled, and 5% reported using more than 50 vendors' products.

"Last year's evolution of malware shows adversaries are becoming wiser at exploiting undefended gaps in security," said John N. Stewart, senior vice president and chief security and trust officer at Cisco. "Like never before, defenders need to make strategic security improvements, technology investments, and incorporate best practices to reduce exposure to emerging risks."

Featured Resources

The IT Pro guide to Windows 10 migration

Everything you need to know for a successful transition

Download now

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Software-defined storage for dummies

Control storage costs, eliminate storage bottlenecks and solve storage management challenges

Download now

6 best practices for escaping ransomware

A complete guide to tackling ransomware attacks

Download now



Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

Microsoft Windows

This exploit could give users free Windows 7 updates beyond 2020

9 Dec 2019
Business strategy

Ex-Apple CPU architect accuses the firm of invading privacy

10 Dec 2019

Patch issued for critical Windows bug

11 Dec 2019
Microsoft Azure

Microsoft, not Amazon, is going to win the cloud wars

30 Nov 2019