Darktrace are one of the new breed of security vendors. Rather than sit on endpoint devices using signatures to detect an attack, they create a profile of how devices, users and applications behave. This approach allows them to establish what is “normal” for that user, device or application and then react when unexpected things happen.
Enterprise Times sat down with Dave Palmer, Director of Technology, Darktrace last week to talk about how Darktrace worked and the challenge of detecting abnormal behaviour.
