One of the basic problems confronting enterprise security is that malicious actors have more attack techniques available than defenders have detections for them.
This reality was confirmed earlier this year when a security industry report found that enterprise security information and event management tools or SIEMs had detections for only 38 out of over 200 MITRE-identified attack techniques.
“I always tell people, look at the MITRE attack framework,” said JR Balaji (pictured, right), director of product management, security and manageability, of the Client Solutions Group at Dell Technologies Inc. “They’re constantly adding new techniques and that’s what customers are up against. Organizations have to think about security a lot more holistically than they ever did, which means not just focusing on software defenses that they’re all used to, not looking at a ‘moat and castle’ approach, but really looking at the entire PC ecosystem and stack.”
Balaji spoke with theCUBE Research’s Dave Vellante and Rebecca Knight…