Real-Time Network Defense vs Reactive EDR and MDR Tools
Key takeaways
- Traditional cybersecurity tools like EDR and MDR are built as reactionary products that detect and report threats after they occur.
- EDR and MDR rely on latency, meaning dealerships only learn of a threat after it has already happened in their network.
- ARMP is powered by Ridgeback Network Defense, which the speaker describes as real-time software for viewing network activity as it happens.
- Ridgeback Network Defense allows dealerships to set up policies and alerts and monitor their network in real time rather than after the fact.
- The speaker describes Ridgeback as allowing an offensive approach through deploying phantoms, compared to setting up a minefield, which he says no other company offers.
Summary
Most cyber security tools on the market, including EDR and MDR products, are built to react after the fact. They monitor endpoints or networks, generate reports on what already happened, and then leave the dealership to respond to whatever threat or breach has occurred. That means there is a lag between when an intrusion happens and when anyone at the store actually knows about it, which can leave customer data and dealership systems exposed longer than owners realize.
This video introduces an alternative approach powered by Ridgeback Network Defense, which Dortch says is real-time rather than reactionary. It lets a dealership view network activity as it happens, set custom policies and alerts, and monitor continuously instead of waiting on after-the-fact reports. He also describes an offensive tactic unique to this approach: deploying decoy "phantoms" across the network like a minefield to catch intruders before real damage is done. For a dealership principal or GM evaluating cyber coverage, the takeaway is to check whether their current solution only detects and reports after a breach, or actually watches the network live.
Transcript
Introduction to the cybersecurity discussion
Hi, my name is Terry Dortch. I'm with Automotive Risk Management Partners. I want to talk to you today about your cyber security solution.
Limitations of reactive EDR and MDR tools
Cyber security is built completely as a reactionary type product. It's a detection and response — I mean, listen, what's EDR, right? Just the name in itself. What's MDR? The names in themselves tell you that it's built around reactionary, right? Endpoint detection response, managed detection response. It's all around latency and running a report that tells you what's happened in your network, and now you have to respond to whatever any type of negative or any type of threat that may have occurred.
Ridgeback Network Defense real-time approach
Here at ARMP, at Automotive Risk Management Partners, we're powered by a company called Ridgeback Network Defense. This is the only real-time software that will allow you to view your network real time. You can set up policies, you can set up alerts, and you can monitor the network in a real-time atmosphere. It's the only one that allows you to take an offensive approach to it by deploying phantoms, just like a minefield — think of it that way. It's the only company out there that does this.
Call to action
Please take a few minutes, look at what you have, give us a call. Information is right here on the screen.
Questions this video answers
Why aren't EDR and MDR tools enough to protect my dealership's network?
EDR and MDR stand for endpoint detection response and managed detection response, and by their names they are built around reactionary detection and latency. They generate reports on what has already happened in your network, meaning you can only respond after a threat has occurred.
What does ARMP offer instead of standard reactive cybersecurity tools?
ARMP is powered by Ridgeback Network Defense, described as the only real-time software that lets you view your network as it happens, set up policies and alerts, and monitor continuously, plus take an offensive approach by deploying phantoms like a minefield.
Can I monitor my dealership's network in real time instead of relying on after-the-fact reports?
Yes, according to the speaker, Ridgeback Network Defense, which powers ARMP's cybersecurity solution, allows real-time viewing of your network along with the ability to set up policies and alerts, unlike reactionary EDR and MDR tools.
Covered in this video
- EDR (Endpoint Detection Response)
- MDR (Managed Detection Response)
- Ridgeback Network Defense
- real-time network monitoring
- Automotive Risk Management Partners