Thales unveils Cybels Analytics AI-based platform to detect complex cyberattacks

Laurent Maury of Thales

At the 2020 edition of the International Cybersecurity Forum (FIC), Thales is unveiling Cybels Analytics, an innovative cybersecurity platform relying on advanced artificial intelligence and Big Data analytics technologies.

The platform provides faster, sharper, more exhaustive detection of the most complex attacks in real time or proactively in differed time (hunting). It meets the needs of the most demanding customers, operating as a single, simple platform that even allows individual users to adapt the AI algorithms to the specific operational context of each sector.

The cyberattack techniques that have emerged in recent years are increasingly complex and hard to detect. Despite growing awareness on the part of organisations, and frequent deployments of rules-based detection systems designed around well-known attack patterns, cybersecurity analysts also need to detect previously unknown threats, detect attacks more quickly and save time in conducting investigation analysis once a system has been compromised.

Thales has developed Cybels Analytics, a comprehensive and advanced attack detection solution, to meet these needs. The innovative platform combinesreal-time threat detectionbased on analysis of existing threats (Cyber Threat Intelligence) and proactive search for advanced and unprecedented cyberattacks (“cold” investigation or Hunting), thanks to artificial intelligence and graphic visualisation modules. These capabilities significantly reduce the time taken to detect advanced persistent threats, from three months in average to just a few days, according to test results.

Cybels Analytics uses machine learning algorithms developed by Thales to detect abnormal situations based on huge volumes of heterogeneous data from multiple sources (network data, end point analysis, OT logging, etc.), helping to identify attack patterns and discover previously unknown threats.These algorithms, based on the principles of Thales TrUE AI, can be tailored to the specific needs of each business sector of activity by customers themselves via an easy-to-use graphical interface.

Cybels Analytics can be integrated with an on premise Security Operations Centre (SOC) or provided as a service in the cloud, enabling all the user’s detection systems (SIEM, EDR, NIDS, etc.) to work together and complement one another. The platform is an important addition to Thales’s cybersecurity offering, rounding out the range of managed services provided through its SOC network and supporting the Cybels Sensor trusted probe, which is accredited by France’s National Agency for Information System Security (ANSSI).

Cybels Analytics is also connected to the Thales Cyber Threat Intelligence service. By cross-referencing information about existing cyberthreats with an organisation’s system logs, Cybels Analytics ensures more acute, more exhaustive detection of untargeted attacks, revealing three times more indicators of compromise detection than conventional attack detection products.

With the entire threat detection ecosystem integrated on the same platform, Cybels Analytics improves the customer’s detection capabilities while simplifying the process for users. In addition, to tailor the platform to the specific environment of each sector of activity, powerful data visualisation modules enable users to run their own searches easily, identify any anomalies at a glance and save precious time at the investigation analysis stage.

While it often takes weeks to build a complete picture of an organisation’s information system using standard investigation products, Cybels Analytics shortens this process to just a few hours.

Thales’s Cybels Analytics platform is a powerful log analytics solution that automatically learns from experience, allowing enterprise and government customers to detect more anomalies, faster and better, and continuously improving the operational efficiency of their efforts to detect new threats and tailor their cyber defences to their specific operating environments.

“We developed Cybels Analytics to help cybersecurity analysts overcome the challenges they face on a daily basis: growing data volumes, long detection times and investigation procedures, and the difficult task of qualifying previously unknown situations.

Cybels Analytics is a trusted solution that delivers more efficient results, more simply and in a significantly shorter timeframe so that users can focus on value-added tasks in an area where talent is scarce and needs are constantly rising.” says Laurent Maury, vice president, Cybersecurity and Critical Information Systems, Thales.

Comment on this article below or via Twitter: @IoTNow_OR @jcIoTnow

Recent Articles

Mouser explores power behind AI at the Edge

Posted on: July 23, 2021

Mouser Electronics Inc. has released the third instalment of the 2021 series of its award-winning Empowering Innovation Together program. The series’ third installment dives deep into artificial intelligence (AI), through an engaging collection of video, long-form articles, blog and infographic content.

Read more

The value of analogue measurement

Posted on: July 23, 2021

Analogue measurement can define your upside. when you look at what you can achieve in a plant, you may be able to accomplish a lot with just simple digital sensors. You can tell when something switches state ( goes on and off), you know if things are running or not running, you can tell if

Read more