Security teams turn to AI to fight hackers

Cisco: CISOs rely on machine learning and automation to combat increasing threat volumes

Security teams are increasingly reliant on machine learning and AI tools to cope with the sheer volume of security threats they face, according to new figures.

More than 70% of 3,600 organisations across 26 countries said they were mostly or entirely reliant on AI, automation and machine learning in order to help cope with the amount of threats faced by businesses, according to Cisco's 2018 Security Capabilities Benchmark Study, released today.

The high volumes of intrusion attempts made on many organisations - in the UK, for example, councils face an average of 27 attacks per minute - often result in huge volumes of event logs, which can be impossible to sift through by hand. This task is made even more difficult by malware that uses encrypted traffic - in which Cisco researchers saw a 300% increase over 12 months.

Instead, many businesses are turning to AI tools, the network vendor claimed, because these can automatically learn what is and is not a normal event, and flag high priority items to security staff.

Similarly, behavioural analytics tools can automatically detect what a given user's normal behaviour is and can identify when an account is acting suspiciously, which may indicate a compromised account or a malicious insider. A total 92% of security professionals said these tools work either very or extremely well.

In order to try and cope with the growing breadth and scale of attack attempts, organisations are deploying an increasing number of tools.

A quarter of respondents to the study reported using security products from between 11 and 20 vendors, an increase of 7% from the previous year. The number of organisations using between 21 and 50 vendors more than doubled, and 5% reported using more than 50 vendors' products.

"Last year's evolution of malware shows adversaries are becoming wiser at exploiting undefended gaps in security," said John N. Stewart, senior vice president and chief security and trust officer at Cisco. "Like never before, defenders need to make strategic security improvements, technology investments, and incorporate best practices to reduce exposure to emerging risks."

Featured Resources

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Evaluate your order-to-cash process

15 recommended metrics to benchmark your O2C operations

Download now

AI 360: Hold, fold, or double down?

How AI can benefit your business

Download now

Getting started with Azure Red Hat OpenShift

A developer’s guide to improving application building and deployment capabilities

Download now

Recommended

Hackers publish over 4,000 files stolen from SEPA in ransomware attack
Security

Hackers publish over 4,000 files stolen from SEPA in ransomware attack

22 Jan 2021
BEC scammers are using Google Forms to identify easy victims
phishing

BEC scammers are using Google Forms to identify easy victims

21 Jan 2021
Weekly threat roundup: SAP, Windows 10, Chrome
vulnerability

Weekly threat roundup: SAP, Windows 10, Chrome

21 Jan 2021
Biden nominees highlight tough cyber security challenges
cyber security

Biden nominees highlight tough cyber security challenges

20 Jan 2021

Most Popular

SolarWinds hackers hit Malwarebytes through Microsoft exploit
hacking

SolarWinds hackers hit Malwarebytes through Microsoft exploit

20 Jan 2021
How to recover deleted emails in Gmail
email delivery

How to recover deleted emails in Gmail

6 Jan 2021
What is a 502 bad gateway and how do you fix it?
web hosting

What is a 502 bad gateway and how do you fix it?

12 Jan 2021