{"id":550,"date":"2018-04-24T16:00:23","date_gmt":"2018-04-24T16:00:23","guid":{"rendered":"https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/?p=82025"},"modified":"2018-04-24T16:00:23","modified_gmt":"2018-04-24T16:00:23","slug":"securing-the-modern-workplace-with-microsoft-365-threat-protection-part-1","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/securing-the-modern-workplace-with-microsoft-365-threat-protection-part-1\/","title":{"rendered":"Securing the modern workplace with Microsoft 365 threat protection \u2013 part 1"},"content":{"rendered":"

This post is authored by Debraj Ghosh, Senior Product Marketing Manager, Microsoft 365 Security.\u00a0<\/em><\/p>\n

The roots of Microsoft 365 threat protection<\/h2>\n

Over the next few weeks, we\u2019ll introduce you to Microsoft 365\u2019s threat protection services and demonstrate how Microsoft 365\u2019s threat protection leverages strength of signal, integration, machine learning and AI to help secure the modern workplace from a ransomware attack. Previously<\/a>, we showcased how Office 365 helps mitigate modern phishing attacks. Microsoft 365 threat protection goes even further, providing robust protection, detection, and response capabilities across an organization\u2019s entire attack surface. For those not aware, Microsoft 365 was introduced<\/a> at last year\u2019s Microsoft Inspire conference<\/a>, to provide an intelligent, integrated, and secure solution for the modern workplace<\/a>, combining the benefits of Microsoft\u2019s flagship Windows, Office 365, and Enterprise Mobility Suite (EMS) platforms. Figure 1 shows the services which are part of Microsoft 365 threat protection and jointly help secure the modern workplace so organizations can initiate and drive their digital transformation.<\/p>\n

\"\"<\/p>\n

Figure 1.\u00a0 The Microsoft 365 threat protection security services<\/em><\/p>\n

Microsoft is committed to a security first mindset<\/h2>\n

Microsoft has always been securing products and platforms to protect our customers who rely on our software and cloud services. Our security focus is essential to meet the 24\/7 business cycle demands and helps ensure our customers rarely experience downtime from a security event. Microsoft invests $1B+ annually on security, employs 3500+ security professionals<\/a>, and has built several strong ecosystem partnerships. As the modern workplace grows in complexity, Microsoft continues building and enhancing its security capabilities to help our customers stay ahead of modern threats. Microsoft itself is one of the world\u2019s largest enterprises and uses the same security products to protect our organization that we offer our customers.<\/p>\n

The Microsoft Intelligent Security Graph<\/h2>\n

For our teams at Microsoft (both in operations and development), security really begins with the Microsoft Intelligent Security Graph<\/a>. It is the platform that powers Microsoft security products and services by using advanced analytics to link threat intelligence and security signals from Microsoft and partners to identify and mitigate cyberthreats. Intelligence in the Intelligent Security Graph comes from consumer and commercial services that Microsoft operates on a global scale, such as Windows, Office 365, and Azure as shown in figure 2. At Microsoft, we have massive depth and breadth of intelligence. Across our global services, each month we scan 400 billion email messages for phishing and malware, process 450 billion authentications, execute more than 18 billion web page scans, and scan more than 1.2 billion devices for threats, nearly 2.6 billion monthly unique file scans, and more than 200 cloud services. Importantly, this data always goes through strict privacy and compliance boundaries before being used for security.<\/p>\n

\"\"<\/p>\n

Figure 2. Microsoft\u2019s Global Threat Intelligence is one of the largest in industry<\/em><\/p>\n

Signal from the graph is analyzed using a combination of Microsoft\u2019s industry leading artificial intelligence and machine learning capabilities coupled with the expertise of security researchers, analysts, hunters, and engineers across the company to quickly identify attacks and emerging trends so that we can evolve the immediate detections and capabilities of Microsoft 365. All our security capabilities leverage the graph, including the threat protection services comprised of Windows Defender Advanced Threat Protection (WDATP), Office 365 Advanced Threat protection (ATP), Office 365 Threat Intelligence, Microsoft Cloud App Security, Azure Security Center, and the newly launched Azure Advanced Threat Protection (Azure ATP).<\/p>\n

These threat protection services also share threat signal with each other through the graph and this signal sharing enables each service to leverage threat data from not only the threats blocked by that service but also threat in the entire threat landscape. While this post uses the example of a sophisticated ransomware attack, customers who leverage the entire Microsoft 365 threat protection stack will have near real-time protection from many types of new and unknown threats (e.g. 0-days, advanced phishing, advanced malware, etc) for their device ecosystem, Office 365 ecosystem, and cloud, on-premises, or hybrid infrastructures by leveraging the Intelligent Security Graph.<\/p>\n

Microsoft 365 threat protection<\/h2>\n

The modern workplace is exposed to the rapid evolution of cyber threats, from individual threats, to sophisticated organizational breaches<\/a>, to rapid cyberattacks<\/a>. With the growing complexity of the modern workplace, the attack surface has rapidly expanded, to a point where no single service can adequately protect an organization. To address this, we focused on developing different services that specialize on the main threat vectors and then integrating them together via the Intelligent Security Graph. The modern workplace is composed of employee identities, enterprise applications and data, devices, and infrastructure. Microsoft 365 threat protection helps mitigate advanced threats from each of these potential threat vectors providing an end to end, holistic solution securing an organization\u2019s entire attack surface enabling:<\/p>\n