Scope Markets

Darktraceは、サイロ化しがちなセキュリティシステム間のギャップを埋め、より効果的な人員配置を可能にします。

テリー・ライト氏

ITインフラストラクチャー部長

Scope Markets

サマリー：

マルチクラウド環境での保護を実現するため、マイクロソフトとDarktraceを駆使

自己学習型AIがクラウドからエンドポイントデバイスまで企業全体を保護

Cyber AI Analystによる調査の自動化により、セキュリティチームの貴重な時間を取り戻す

‍

AIでクラウドを保護

Scope Markets is 100% cloud-based, utilizing public cloud infrastructure and Microsoft 365. While its comprehensive migration to the cloud has facilitated flexible working and fast growth over the last four years, it has simultaneously expanded the attack surface and exposed the organization to new threat vectors.

The team at Scope Markets were already leveraging Microsoft security products – including Sentinel and Defender for Endpoint – to catch known cyber-attacks but turned to Darktrace to complement these solutions with an additional layer of insight. Darktrace uses Self-Learning AI to stop novel and sophisticated threats, the 'unknown unknowns' that evade signature-based tools.

The technology was set up in under an hour and immediately began learning from scratch, developing a continuously evolving 'pattern of life' for the organization, enabling it to detect subtle deviations indicative of attack.

Scope Marketsのようにクラウドをフル活用する組織の保護を確保するためには、統一された可視性と多次元的な洞察力が不可欠です。Darktraceの自己学習型AIは、SalesforceやMicrosoft 365などのSaaSアプリケーション、AWSやAzureなどのクラウドサービス、すべてのオンプレミスおよびオフプレミスのデジタルインフラにまたがる活動を関連付け、あらゆる悪質な活動を自律検知します。

Furthermore, Darktrace's open architecture enables seamless integrations with disjointed defenses, streamlining alerts for the IT security team and instantly correlating insights across multiple siloes.

エンドポイントセキュリティの全体像を把握

Darktrace's Self-Learning AI takes into account activity from across the enterprise – from cloud applications to the corporate network, and down to the endpoint – something the security team found particularly valuable following the sudden transition to remote working in 2020.

Employees who were previously protected behind firewalls on office desktops were left more vulnerable to fraudulent or malicious websites. Having Darktrace on the endpoint shed a light on the anomalous activity that could expose the business to harm.

Learning the unique 'patterns of life' for every user and device within Scope Markets' cyber ecosystem, Darktrace provides a holistic view of the digital business to detect subtle indications of cyber-threat.

Scope MarketsのITインフラ責任者であるテリー・ライト氏によると、「エンドポイントで何か異常が発生し、その数分後にMicrosoft 365で異常が発生した場合、Darktraceはそれらを同じインシデントの一部として認識することができるのです。以前はそれができなかったのです」

自律的な調査により人間のチームを補強

Darktraceは、斬新かつ高度な脅威からの自律保護に加え、セキュリティインシデントの全容を自動的にトリアージ、解釈、報告するCyber AI Analystによって、Scope Marketsのセキュリティチームを増強することを支援しています。

The technology combines expert analyst intuition with the consistency, speed, and scalability of AI. Wright's team use Cyber AI Analyst to illuminate the highest priority threats at any one time, with the technology rapidly synthesizing all of the context around an attack into a natural language report. "Our alerts can be filtered with Self-Learning AI so that they're more relevant, saving time for our security team and enabling more efficient allocation of staffing," says Wright.