Insider Threat Identified as a Use Case for Behaviour Analytics
Boston, November 4, 2015 – Proofpoint, the leader in user behaviour analytics for insider threat detection, has been recognised by Gartner as a “Representative Vendor” in its 2015 Market Guide for User and Entity Behaviour Analytics (UEBA). Gartner reports that in 2015 “inquiries by end-user organisations on user behaviour analytics rose nearly tenfold, and on security analytics by 25%.” Additionally, “Gartner expects UEBA market revenue will climb to almost $200 million by the end of 2017, up from less than $50 million today. “
With two out of every three security incidents stemming from internal users, insider threat was identified as one of five domain expertise and use cases. “Since malicious intent is difficult to assess, best-in-class vendors in this category analyse contextual behavioural information not readily available in log files.” With an endpoint agent-based approach, Proofpoint ITM is able to distinguish abusive behaviour from normal activity, determine user intent, collect irrefutable forensic evidence, and even deter or block out-of-policy behaviour.
“When employees were involved in a collection of incidents including copyright infringement, password harvesting, evidence tampering and billing fraud, it was Proofpoint ITM that enabled me to detect and investigate,” says Richard C. Malewicz, CISO of Livingston County. “With Proofpoint ITM I had the irrefutable evidence I needed to take action, leading to the termination of the employees involved.” Learn more about Richard’s incredible story on November 7th, when he hosts a live webinar with Proofpoint. Click here to register for the webcast.
“This report further confirms what our customers have been telling us – insider threat is a top of mind concern and log files aren’t sufficient,” said Paul Brady, CEO of ObserveIT. “You need to capture and analyse user behaviour at the endpoint and within applications, and that is exactly what Proofpoint does.”
About Proofpoint
Proofpoint is the leader in user behaviour analytics for inside threat detection and enables companies to mitigate the risk of insider threats from business users, privileged users, and third-party contractors.
Proofpoint ITM records, monitors, and analyses user behaviour across the entire enterprise down to the application field level with zero operational impact. Analytics and scoring identify users who represent the greatest risk, enabling security teams to respond before the business is impacted. Our granular user activity metadata provide a detailed audit trail of all user behaviour to streamline investigations and audits.
Proofpoint is trusted by over 1,200 customers in 70 countries across all verticals. For more information on Proofpoint, visit www.Proofpoint.com, or find us on Twitter @Proofpoint.