The report reveals that organizations today face ever-increasing workloads, increasingly sophisticated threats and poor threat visibility, leading to multiple breaches for 45% of them
Vectra AI, a cybersecurity leader in detecting and remediating cyber threats for hybrid and multicloud enterprises, released the report “The Evolving role of Network Detection and Response (NDR)”. The report highlights why today's security teams are finding it increasingly difficult to detect and stop cyber threats affecting their organizations. Research found that 70% of organizations have fallen victim to an attack that used encrypted traffic to avoid detection. Almost half (45%) admitted to having been the victim of similar attacks several times. Also of concern is that two-thirds (66%) of organizations still do not have visibility into all encrypted traffic, making them highly vulnerable to further encrypted attacks.
The report shows that cybersecurity and networking professionals are struggling with rapidly increasing threat detection and response workloads, which is preventing analysts from addressing the most sophisticated threats. Here are some of the main findings of the research:
- 45% of cybersecurity and networking professionals believe threat detection and response workloads have increased – 40% cite a greater number of resources in the cloud and 36% a greater number of devices on the network
- 37% believe the sophistication of threats has increased, making it difficult for analysts to spot legitimate attacks
- 69% agree that the delay between vulnerability exploitation and detection gives attackers too much time to breach a network – 29% also cite communication issues between the Security Operation Center (SOC) and other IT teams
- 23% believe SOC analysts do not have the right level of skills and one in five (18%) believe they are understaffed – this suggests that security analysts are ill-equipped to handle the scale of cyberattacks they face
- 60% of SMBs believe detecting and responding to threats is more difficult today – this shows that smaller organizations struggle to keep up with the evolving cybercrime landscape.
"Organizations face a barrage of threats on all fronts – across the network, cloud and IT environments – as cybercriminals use techniques such as encryption to penetrate businesses undetected. Furthermore, many organizations lack the skills or staff needed to handle growing security workloads," he comments Mark Wojtasiak, VP Product Strategy di Vectra. “To curb the phenomenon, security teams need total visibility into their environments, so they can spot the signs of an attack before it becomes a breach. By equipping analysts with Attack Signal IntelligenceTM Driven by AI, organizations can prioritize otherwise unknown and urgent threats that pose the greatest risk to the business. This improves analyst productivity by reducing the background noise of security alerts, and empowers them to reduce risk and keep organizations safe.”
Research information
The report The Evolving Role of NDR, conducted by Enterprise Strategy Group (ESG), interviewed 376 IT, cybersecurity and networking professionals responsible for managing network security for their organizations.
