GCC’s aluminium giant accepts Vectra Attack Signal Intelligence to detect threat

Gulf Cooperation Council's largest premium aluminium producer has adopted Vectra's technology to identify real threats and their advancement through the cyber kill network so that quick action can be taken to detect an attack and stop a vital breach.

This modernist approach, along with a substantial decrease in false optimism, has enabled a single security analyst to store and manage the SOC operations of that individual firm.

An operative from the aluminium plant mentioned: "When it comes to protecting against attacks, the key challenge we faced was visibility — silos and isolated networks exist across the environment, and it was difficult to control it completely."

"We also struggled with alert fatigue — we used to have a SIEM and antivirus solutions, and we would get a lot of alerts, which meant our SOC analysts had to manually analyse and prioritise the alerts. And finally, our security solutions, be it the SOAR and EDR solutions, firewalls or IPSs, are all reactive, which meant that by the time we received a trigger, it was already too late, and the attacker was in our network," the person added.

Vetra solutions come with the company's flagship Attack Signal Intelligence technology that permits the aluminium producer's security teams a shift from the passive to a completely aggressive outlook in tackling cybersecurity threats even before they get the chance of turning into something harmful.

In comparison with programmes that utilise AI for discrepancy detection and need manual tuning and maintenance, Vectra Attack Signal Intelligence successively looks out for attacker anomalies with a series of Security AI models initiated to understand attacker TTPs.

The test results are then put through another layer of AI that determines the severity of threats and prioritises that account. The module is aligned with the firm's environment showing threat models and human threat intelligence.

A Vectra associate cleared the entire concept saying: "The biggest advantage of the Vectra solution is the anomaly detection because it's not signature-based. It picks up the initial part of any attack, like the recon and those aspects of the kill chain, very well."

Signing up for the Vectra service assures the aluminium producer that 90 per cent of the threats would be detected in the initial stage, thus flat-lining the number of fake positives to just 1 per cent. Due to this, only one security analyst would be able to manage all the related SOC operations.

The Managing Director for EMEA South at Vectra AI, Taj El-Khayat, exemplified: "Today, security teams are over-stretched and suffer burnout. They are stuck in a vicious cycle of having to manually maintain detection rules, triage alerts, and figure out what alerts to prioritise. Compounding these challenges is the fact that today, the biggest threats facing organisations in the region is the unknown compromise. These are precisely the challenges that the aluminium producer was facing and why they selected Vectra to underpin their SOC."

"I am confident that with Vectra, the company's security professionals will no longer have to worry about detecting and prioritising threats and can instead devote their time to doing what they do best — investigating and responding to real attacks," he concluded.