Behavioral NDRs are a major evolution and depart from signature-based Intrusion Detection and Prevention systems and I believe NDRs will continue to evolve in terms of use cases, SOC integration, and deployment forms. This is because:
- Network metadata will continue to be an indispensable source for security analysts.
- Attackers will continue to morph attacks, enforcing more the need for behavioral detection.
- Cloud technologies will continue to furnish the scalable platform that behavioral analytics thrives on.
Do you see NDR technology as integral part of your defense layers? Do you foresee that it will continue to evolve and cope well with polymorphic attacks? Or do you think otherwise?
