Balanced Approach Works Best

It’s hard to balance spending across the prevention, detection, response and analytics because marketing messages over the last several years have mainly favored breach detection technologies. Vendors that have contributed to the heavy spending on detection include Palo Alto Networks and FireEye, followed by a spate of other vendors that have added capabilities to detect the so-called advanced threats that evade traditional security technologies. Gartner recommends to address endpoint and network security weaknesses by addressing policy gaps, enforcement and process improvements for endpoint devices and adding continuous monitoring. Proactive monitoring of subtle system processes, file and application behaviors for suspicious activity could help reduce the time between an infection and its detection.