New Exabeam User Behavior Analytics Software Release

• Jun 09, 2015

Exabeam announced the release of Exabeam Version 1.7 to its rapidly growing customer base, which includes companies in the government, financial services, healthcare, power and energy, and retail markets. Since its User Behavior Analytics solution was first made generally available in February, Exabeam is now deployed at more than 50 customer sites, up from 20 customer sites five months ago. Like the original solution, Exabeam Version 1.7 employs Stateful User Tracking^T and machine learning to understand normal user credential behaviors so anomalous behaviors can be quickly discovered and managed, and to empower security teams with the information they need to stop attacks quickly.

Combining behavioral analytics, data science and machine learning, Exabeam Version 1.7 boasts the following new features and capabilities:

• Differentiating asset types without accessing an asset database – Exabeam Version 1.7 automatically understands device behavior and learns how it should monitor different types of assets in the environment, which saves security teams time and money by avoiding manual processes.
• Visibility into highly privileged service account characteristics for risk reduction – Organizations have two types of highly privileged accounts: one used by humans and one used by machines. Exabeam learns the difference to know if an attack is originating from a business partner organization or from inside the company, so security teams know how to handle attacks more efficiently and effectively.
• Determining organizational activity risks – Executives need to understand where internal risks are originating in order to analyze and address them. Exabeam Version 1.7 highlights employees who travel frequently, are BYOD users or have more access privileges.
• Monitoring exploitation of account creation as an attack vector within the IT environment – Phantom employee accounts are used by attackers to stay inside organizations for long periods of time, often causing the largest data breaches. Using behavior analytics to discover these accounts as they are created reduces the risk of data breaches happening in the first place, let alone continuing over lengthy time periods.

“User behavior analytics is critical to quickly understanding the real risks threatening today's complex infrastructure environments,” said John Masserini, vice president and CISO at MIAX Options Exchange, an Exabeam customer. “Exabeam provides visibility into attacker behaviors by first understanding what are normal credential behaviors to then reveal what’s anomalous. Exabeam helps organizations identify and neutralize malicious intruders that may have otherwise gone unnoticed until it is too late.”

“In a business environment that’s always in flux, the security team doesn’t always know what systems and credentials have been provisioned and to whom. This constricts the visibility they need to see attacks in context. Using the right mix of security knowledge and data science, we can solve this hard problem,” said Nir Polak, Exabeam CEO. “Exabeam Version 1.7 uses data science to address inefficiencies in incident response and a lack of security context in the enterprise to find attackers empowering malware with stolen credentials to impersonate users.”