FortiGuard AI automates threat intelligence analysis and detection to stay ahead of the rapidly expanding threat landscape
Rajesh Maurya, Regional Vice President, India & SAARC at Fortinet said, “Increasingly, cybercriminals and adversarial nations leverage automated and polymorphic techniques to increase the speed and scale of their malicious activity, while evading detection by creating hundreds of zero-day variants and resulting in overwhelmed defenders. Enterprises need a way to address such techniques and increase the attackers’ costs while reducing their own operating expenses. Fortinet Labs’ five-year investment in automated analysis and detection of polymorphic threats has resulted in FortiGuard AI, a giant leap towards achieving that goal. FortiGuard AI analyzes and identifies threats with speed, agility, and accuracy to provide proactive threat detection at machine speed and scale. This frees threat analysts and network operators to focus on critical threat research and higher-order problems, reduces exposure to zero-day attacks, and minimizes the risk to Fortinet customers while increasing the attacker’s costs.”
Fortinet announced the next generation of threat intelligence and detection with the release of FortiGuard AI. FortiGuard AI is built into Fortinet’s threat intelligence services platform and delivers automated threat analysis and detection to ensure customer Security Fabric solutions are continually updated to protect against the latest threats across a rapidly expanding threat landscape.
- FortiGuard AI is a self-evolving threat detection system that uses machine learning and continuous training to autonomously collect, analyze, and classify threats with a high degree of accuracy and at machine speed.
- FortiGuard AI is integrated into Fortinet’s threat intelligence services platform to power all of the advanced threat detection capabilities that FortiGuard services share across the Security Fabric.
- Fortinet also announced new User Entity and Behavioral Analysis (UEBA) capabilities, and the launch of FortiGuard Threat Intelligence Service (TIS) as an enterprise service offering.
Training Machines to Defend Against a New Generation of Automated Cyber Threats
Cybercriminals have been increasingly leveraging automated threats to overwhelm cybersecurity defenses and the trend of adopting artificial intelligence and automation in cyberattacks is expected to increase in 2018 and beyond; creating an arms race for security solutions that can operate at ever-increasing speed and scale.
Fortinet’s FortiGuard Labs consists of 215 expert researchers, analysts, and engineers in 31 countries leveraging cutting-edge technology to analyze threat data from a global network of more than three million security sensors. Predicting the increases in speed and scale needed to defend against automated cyberattacks, FortiGuard engineers started building an automated machine learning system capable of rapidly and accurately processing its massive volume of threat data to identify new threats.
Under constant development and trained using supervised learning techniques for over five years, FortiGuard AI analyzes millions of threat samples per week. The samples are processed by over five billion processing nodes which identify the unique malicious and clean features of each sample. Using advanced algorithms, FortiGuard AI proactively determines if a new sample poses a threat and generates threat intelligence that updates defensive signatures across the entire Fortinet Security Fabric.
Threat Intelligence at Machine Speed and Scale
The speed, scale, and accuracy of FortiGuard AI enhances Fortinet’s leading threat intelligence services that deliver real-time updates and proactive threat protections to the Fortinet Security Fabric.
Along with the release of FortiGuard AI, Fortinet is also announcing updates to the FortiGuard Threat Intelligence Service (TIS) and the addition of new behavior analysis capabilities for FortiSIEM:
- FortiGuard TIS: Launched as a beta in 2017, FortiGuard TIS is now available as an enterprise service that delivers cloud-based threat intelligence metrics and activity trends specific to an organization’s unique threat landscape. FortiGuard TIS enables CISOs to instantly understand what is happening across the global threat landscape to prioritize resources and fine-tune security policies for their infrastructure.
- FortiSIEM User and Entity Behavior Analysis (UEBA): Fortinet is also leveraging machine learning to enhance its advanced detection with new UEBA features in FortiSIEM version 5.0, which learns patterns in typical user behavior like location, time of day, devices used, and specific servers accessed. FortiSIEM can then automatically notify security operations teams when anomalous activity like concurrent logins from separate locations, users accessing corporate data in the middle of the night, and excessive logins to rarely used servers occur.
Eric Kohl, vice president, advanced solutions & networking, Ingram Micro said, “Helping our mutual channel partners stay one step ahead of the constantly evolving cybersecurity market is a commitment Fortinet and Ingram Micro share. We’ve collaborated closely to deliver advanced security solutions for those partners, pairing offerings such as FortiGuard AI with our expertise throughout the security sales cycle. Our objective is to provide channel partners with the technology, services and support they need to serve as trusted security advisors in today’s increasingly hostile threat landscape.”
Tom Stafford, Chief Information Officer, Halifax Health said, “New zero-day threats like WannaCry have resulted in rapidly spreading outbreaks that give little time for organizations to react and today’s threat landscape is evolving faster than many organizations can keep up with. The security of our patients’ data is paramount and the new release of FortiGuard’s threat intelligence services will ensure that our security solutions are automatically updated to defend against the latest breaking threats. We are looking forward to utilizing FortiGuard AI to increases our confidence in being able to detect and secure our data against a dynamic threat landscape at increasing speed and scale.”
