An Offensive, Real-Time Cyber Security Tool for Dealerships

Terry Dortch President, Automotive Risk Management Partners

Key takeaways

  • ARMP offers a cyber security solution that allows dealerships to view their network in real time.
  • The solution takes an offensive approach by deploying decoy addresses called Phantoms within the network to slow down potential hackers.
  • Bogging down an intruder in a minefield of dummy addresses gives network managers time to identify and address a potential threat before major damage occurs.
  • Traditional cyber security reports, even ones run just days earlier, only show what happened after the fact, leaving a gap where damage could occur unnoticed.
  • Terry Dortch describes this as the only tool available that provides real-time, offensive cyber security monitoring rather than after-the-fact reporting.

Summary

Real-time network monitoring is presented as a better way to handle cyber security than relying on periodic reports that only show what already happened. Instead of waiting on a scan run days or months earlier, a dealership can see threats as they occur and respond before damage spreads. The approach described uses decoy addresses, called Phantoms, deployed throughout the network to slow down and trap anyone attempting to break in, buying time for network managers to identify and address the threat.

For a dealership, this matters because customer and financial data sitting on the network is a constant target, and a delayed report means an attacker could already be inside before anyone knows there is a problem. Terry Dortch frames this offensive, real-time approach as the only tool of its kind available, positioning it as a way for dealership principals and GMs to move from reactive cleanup after a breach to active defense that catches intrusions while they are happening.

Transcript

Introducing the real-time cyber security solution

Hi, my name is Terry Dortch. I'm with Automotive Risk Management Partners. I want to talk to you today about your cyber security solutions. We have a solution for you that is built in real time. It allows you to view your network in real time.

How the offensive Phantoms approach works

It takes an offensive approach to cyber security by deploying Phantoms within the network. And what it does is, it's basically a minefield of dummy addresses, that if someone were trying to hack into your system, they would get bogged down in it. And it would allow anyone that's managing that network time then to come in and address whatever potential threat may be there.

Limits of after-the-fact security reports

It's the only tool out there that provides you with an offensive approach to cyber security, so that now you're not just sitting here dealing with a report that was ran three months ago, or let's even say that it was three days ago. How much damage could have been done between then and now? We don't know, and we don't know what that threat was, obviously, until now, until after the fact. Try and think about that for a minute.

Call to action for real-time protection

We have the only tool out there that can look at this in a real-time atmosphere. Please give us a call, information is right here on the screen.

Questions this video answers

How is this cyber security approach different from a standard network security report?

A standard report, even if run just days ago, only tells you what already happened, so you do not know what damage occurred in the meantime. This solution instead lets you view your network in real time as threats emerge.

What does it mean for this tool to take an offensive approach to cyber security?

It deploys Phantoms, which act as a minefield of dummy addresses within the network. If someone tries to hack in, they get bogged down in these decoys, giving whoever manages the network time to address the potential threat.

Why does real-time visibility into the network matter for a dealership?

Without real-time visibility, a dealership only learns about threats after the fact through periodic reports, during which unknown damage could already have occurred. Real-time viewing lets the dealership respond to threats as they happen instead of after the damage is done.

Covered in this video

  • Cyber security monitoring
  • Network intrusion detection
  • Real-time threat response