{"id":37761,"date":"2020-10-20T16:00:50","date_gmt":"2020-10-20T16:00:50","guid":{"rendered":"https:\/\/www.microsoft.com\/security\/blog\/?p=92106"},"modified":"2020-10-20T16:00:50","modified_gmt":"2020-10-20T16:00:50","slug":"ciso-spotlight-how-diversity-of-data-and-people-defeats-todays-cyber-threats","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ciso-spotlight-how-diversity-of-data-and-people-defeats-todays-cyber-threats\/","title":{"rendered":"CISO Spotlight: How diversity of data (and people) defeats today\u2019s cyber threats"},"content":{"rendered":"
<\/div>\n

This year, we have seen five significant security paradigm shifts<\/a> in our industry. This includes the acknowledgment that the greater the diversity of our data sets, the better the AI and machine learning outcomes. This diversity gives us an advantage over our cyber adversaries and improves our threat intelligence. It allows us to respond swiftly and effectively, addressing one of the most difficult challenges for any security team. For Microsoft, our threat protection is built on an unparalleled cloud ecosystem that powers scalability, pattern recognition, and signal processing to detect threats at speed, while correlating these signals accurately to understand how the threat entered your environment, what it affected, and how it currently impacts your organization. The AI capabilities built into Microsoft Security solutions are trained on 8 trillion daily threat signals from a wide variety of products, services, and feeds from around the globe. Because the data is diverse, AI and machine learning algorithms can detect threats in milliseconds.<\/p>\n

All security teams need insights based on diverse data sets to gain real-time protection for the breadth of their digital estates. Greater diversity fuels better AI and machine learning outcomes, improving threat intelligence and enabling faster, more accurate responses. In the same way, a diverse and inclusive cybersecurity team also drives innovation and diffuses group think.<\/p>\n

Jason Zander, Executive Vice President, Microsoft Azure, knows firsthand the advantages organizations experience when embracing cloud-based protections that look for insights based on diverse data sets. Below, he shares how they offer real-time protection for the breadth of their digital estates:<\/p>\n

How does diverse data make us safer?<\/h2>\n

The secret ingredient lies in the cloud itself. The sheer processing power of so many data points allows us to track more than 8 trillion daily signals from a diverse collection of products, services, and the billions of endpoints that touch the Microsoft cloud every month. Microsoft analyzes hundreds of billions of identity authentications and emails looking for fraud, phishing attacks, and other threats. Why am I mentioning all these numbers? It\u2019s to demonstrate how our security operations take petabytes\u2019 worth of data to assess the worldwide threat, then act quickly. We use that data in a loop\u2014get the signals in, analyze them, and create even better defenses. At the same time, we do forensics to see where we can raise the bar.<\/p>\n

Microsoft also monitors the dark web and scans 6 trillion IoT messages every day, and we leverage that data as part of our security posture. AI, machine learning, and automation all empower your team by reducing the noise of constant alerts, so your people can focus on meeting the truly challenging threats.<\/p>\n

Staying ahead of the latest threats<\/h2>\n

As the pandemic swept the globe, we were able to identify new COVID-19 themed threats\u2014often in a fraction of a second\u2014before they breached customers\u2019 networks. Microsoft cyber defenders determined that adversaries added new pandemic-themed lures<\/a> to existing and familiar malware. Cybercriminals are always changing their tactics to take advantage of recent events. Insights based on diverse data sets empower robust real-time protection as our adversaries\u2019 tactics shift.<\/p>\n

Microsoft also has the Cyber Defense Operations Center (CDOC<\/a>) running 24\/7. We employ over 3,500 full-time security employees and spend about $1 billion in operational expenses (OPEX) every year. In this case, OPEX includes all the people, equipment, algorithms, development, and everything else needed to secure the digital estate. Monitoring those 8 trillion signals is a core part of that system protecting our end users.<\/p>\n

Tried and proven technology<\/h2>\n

If you\u2019re part of the Microsoft ecosystem\u2014Windows, Teams, Microsoft 365, or even Xbox Live\u2014then you\u2019re already benefitting from this technology. Azure Sentinel<\/a> is built on the same cybersecurity technology we use in-house. As a cloud-native security information and event management (SIEM) solution, Azure Sentinel uses scalable machine learning algorithms to provide a birds-eye view across your entire enterprise, alleviating the stress that comes from sophisticated attacks, frequent alerts, and long resolution time frames. Our research has shown that customers who use Azure Sentinel achieved a 90 percent reduction in alert fatigue<\/a>.<\/p>\n

Just as it does for us, Azure Sentinel can work continuously for your enterprise to:<\/p>\n