The GSN 2015 Digital Yearbook

GSN 2015 DIGITAL YEARBOOK OF HOMELAND SECURITY AWARDS RECIPIENTS
IT Security Products and Solutions
RSA, The Security Division of EMC
2015 Winner
Awards Category:
––––––––––––––––––––––––––––––––––––––––
Best Endpoint Detection and Response Solution
Name of Nominated Product, Service,
or Program:
––––––––––––––––––––––––––––––––––––––––
RSA ECAT
Reason this entry deserves to win:
––––––––––––––––––––––––––––––––––––––––
RSA President Amit Yoran said “IT Security has Failed.”
Organizations across a wide range of industries are
breached, new malware, zero-day vulnerabilities are
everywhere. Money, intellectual-property, hacktivism
are only a few of the reasons. They are bombarded with
crimeware, adware, targeted campaigns, and nationstate
attacks. Attackers today can easily bypass traditional
signature-based defenses, create persistency, move
laterally, exfiltrate data while leaving organizations blind
from those types of threats that will put their name on
the first page of today’s news. RSA does not believe in
this status quo! How is RSA ECAT doing things differently?
ECAT is an endpoint threat detection and response
solution focused on malware and other threats’ behavioral
detection, able to provide visibility to how wide-
spread an attack is and instantly determine the scope
and mitigate in real-time. Analysts trust ECAT to identify
both the known and unknown zero-day malware based
on its behavioral-based detection capabilities.
RSA ECAT’s approach provides:
• Behavioral modeling via ECAT’s Instant Indicator of
Compromise (IIOC). ECAT provides an out-of-the-box
list (~300) of IIOCs for both Windows and Mac operating
systems, being able to identify the exact attack
vector used by threats and generic behavior indicative
of malware. Based on IIOCs triggered, a machine and
module risk score are generated enabling analysts for
better detection and prioritization capabilities. ECAT’s
IIOCs expose the attack characteristics by pointing the
72