Alert Stop Bad Rabbit Ransomware In Its Tracks. Learn more

Excerpts from Moving Endpoint Security to the Predictive Cloud: Choosing the Right Cloud

moving-endpoint-security-to-the-predictive-cloud
Rick McElroy
sean_blanton
March 22, 2018 / Rick McElroy Sean Blanton

Carbon Black recently published a whitepaper on the reasons and benefits of moving endpoint security to the cloud; this is the first excerpt from that guide, which you can find here. For more information about how the Cb Predictive Security Cloud, Carbon Black’s comprehensive endpoint protection platform, delivers next-generation security services through the cloud, check out our weekly Cb Defense Live Demo, every Wednesday at 2PM EST, 11AM PST.


Choosing the Right Cloud

In an attempt to take advantage of the clear benefits that come with cloud computing, many traditional endpoint security vendors have begun offering cloud versions of their solutions. However, not all security clouds are built the same.

In fact, most cloud-based antivirus options available today are retrofit solutions that have simply migrated their on premises products to vendor-managed servers. Under the covers, they still operate with the same outdated technologies that only protect against malware threats after they have been discovered. Customers are left with weak protection in a rapidly accelerating threat landscape.

On the other hand, a cloud built on bi-directional communication with endpoints, where endpoint data is sent to a cloud-based big data and realtime analytics engine, transforms the endpoint environment into a global threat monitoring system. The cloud is predictive, able to discover threats never seen before and provide protection from sophisticated attacks to every endpoint under management.

When evaluating your next endpoint security solution, the following table will help you determine if the cloud solution you are looking at will deliver on the full promise of cloud computing for security.

 

     
 

Traditional AV
(Retrofit Cloud)

Next-Gen Endpoint Security
(Big Data Cloud)

             

Threat Detection

 

Malware Only
Focuses on executable-based threats.

 

 

Malware and Fileless
Detects executable-based threats as well as advanced attacks that don’t use malware.

 

             

Endpoint Communications

 

Broadcast
“Black-box” threat information is broadcast one-way to endpoints, with no data collected from them.

 

 

Bi-directional
Threat data is exchanged back and forth between endpoints and the cloud, creating a global threat monitoring system.

 

             

Data Collection

 

None
Endpoint data is not sent to the cloud, leaving users with no context about security events.

 

 

Unfiltered
Endpoint telemetry is sent to the cloud, providing a complete contextual picture for investigation against them.

 

             

Security Posture

 

Reactive
Protects against known threats and limited attack behaviors.

 

 

Predictive
Discovers new threats never seen before and protects against them.

 

             

Updates

 

Manual and Delayed
The customer is responsible for applying updates, keeping policies configured correctly, and deploying new defense techniques when they are available.

 

 

Automatic and Real-Time
Every endpoint benefits from new defense techniques and algorithms deployed natively in the cloud, along with easy, lightweight agent updates.

 

             

______________________________________________

 

Listen to our security experts at Carbon Black and Network Security Engineer Christopher St. Amand at PeoplesBank during a recent webinar where we discussed the benefits of cloud-based security platforms and how they apply to your specific needs.

Watch Now

______________________________________________

 

Thanks for joining us as we explored “Moving Endpoint Security to the Predictive Cloud,” our whitepaper on the reasons and benefits of moving endpoint security to the cloud. You can click here to get a copy of the full report. Join us next week as we continue to profile this report.

TAGS: Cb Predictive Security Cloud / Cloud-Based Endpoint Security / predictive security