Cyber Deception Reduces Data Breach Costs by Over 51% and SOC Inefficiencies by 32%

New report identifies financial savings and increased productivity

Attivo Networks® has announced the results of a new research report conducted with Kevin Fiscus of Deceptive Defense, Inc., “Cyber Deception Reduces Breach Costs & Increases SOC Efficiency.” The paper identifies the direct and measurable financial and productivity benefits of deception technology for organizations of all types and sizes.

The report reveals that companies using cyber detection reduce data breach-related costs by over 51% as compared to organizations that do not deploy deception technology. The research also indicates that the average reduction in data breach costs is $1.98 million per incident or $75.12 per compromised record. The cost reductions are based on factors of faster detection and response, effective incident response and reduced incident handling complexity.

In addition, it reports that deception technology can significantly reduce time wasted on false positive alerts and increase efficiencies for the typical Security Operations Center (SOC). A recent Ponemon Exabeam SIEM Productivity Study found that the average amount of time spent per SOC analyst per incident was around 10 minutes and SOC analysts waste approximately 26% of their day dealing with false alarms, representing a loss of over $18,000 in productivity per analyst per year. Users of deception technology have cited a 12X time savings when addressing a deception-based alert as opposed to other alerts, which ultimately can save organizations as much as 32% or $22,746 per SOC analyst per year.

"The term 'game changing' is used far too often,” said Kevin Fiscus, SANS Institute Principal Instructor and founder of Deceptive Defense. “Almost as often as so many grand claims are made, they are found to be over-hyped, at best, and for that reason, they are rightly met with suspicion. Cyber deception is different and it’s not just a new iteration of a legacy technology. It literally changes the game of computer security. It changes the rules. It changes the fundamental assumptions that attackers and defenders have relied upon for decades. The true ‘magic’ of cyber deception is that it causes attackers to question everything they believe they know, often stopping an attack before it’s even really started. That is truly game changing."

“Industry research continues to validate why cyber deception is not only a vital control for detection but also one that will yield significant cost savings,” said Carolyn Crandall, Attivo Networks Chief Deception Officer and CMO. “Organizations both large and small are increasingly leveraging deception to create a proactive defense and are adding detection and prevention depth to their security posture. Executives are prioritizing security investments that help them fight disruption of service, prevent ransomware extortion, and ensure the security of their data. The ability to detect attacks early, reduce data breach costs, and improve SOC efficiencies makes cyber deception a critical security control for the enterprise.”

In addition to the financial and productivity benefits provided by deception technology, the report also cites that properly deployed deception technology can reduce a company’s average dwell time between 90% and 97% — down to as little as 5.5 days. This is significant as recent reports show that the current median dwell time is 56 days, and the mean time to identify a breach is 207 days.

This research, when paired with the MITRE ATT&CK® framework DIY APT tool test results, demonstrates how deception technology can be a powerful security control to add to every defender's arsenal. This APT testing specifically validated the Attivo Networks solution’s ability to boost EDR detection rates by an average of 42% and its impact in reducing dwell time.

Featured

  • Allegion, Comfort Technologies Implement Mobile Credentials at the Artisan Apartment Homes in Florida

    Artisan Apartment Homes, a luxury apartment complex in Dunedin, Florida, recently transitioned from mechanical keys to electronic locks and centralized system software with support from Allegion US, a leading provider of security solutions, technology and services, and Florida-based Comfort Technologies, which specializes in deploying multifamily access control, IoT devices and software management solutions. Read Now

  • Mall of America Deploys AI-Powered Analytics to Enhance Parking Intelligence

    Mall of America®, the largest shopping and entertainment complex in North America, announced an expansion of its ongoing partnership with Axis Communications to deploy cutting-edge car-counting video analytics across more than a dozen locations. With this expansion, Mall of America (MOA) has boosted operational efficiency, improved safety and security, and enabled more informed decision-making around employee scheduling and streamlining transportation for large events. Read Now

  • Security Industry Association Launches New “askSIA” AI Tool

    The Security Industry Association (SIA) has unveiled a brand-new SIA member benefit – askSIA, a conversational AI agent designed to help users get the most out of their SIA membership, easily access SIA resources and find the latest information on SIA’s training and courses, reports and publications, events, certification offerings and more. SIA members can easily find askSIA by visiting the SIA homepage or looking for the askSIA icon in the top left of webpages. Read Now

    • Industry Events
  • Industry Embraces Mobile Access, Biometrics and AI

    A combination of evolving workplace dynamics, technology innovation and new user expectations is changing how people enter and interact with physical spaces. Access control is at the heart of these changes. Combined with biometrics and AI, mobile access control has become increasingly crucial for deploying entry solutions that are seamless, secure and adaptive to user needs. Read Now

  • Sustainable Video Solution Delivered for Landmark City of London Office Development

    An advanced, end-to-end video solution from IDIS, with a focus on reducing waste and costs, has helped a major office development in the City of London align its security with sustainability objectives. Read Now

New Products

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.