What is Network Detection & Response?
NDR (network detection and response) is a solution that adds context to security threats. Features such as network traffic analysis and the real-time inspection of network communications allow NDR solutions to detect and investigate threats, anomalous behaviours and risky activity across all the corners of your network. NDR acts as a virtual forensic expert that has the capability to understand the exact scope and peculiarities of a security incident or breach.
NDR solutions harness the strengths and virtually unlimited capabilities of high-end AI, machine learning and deep learning to provide predictive risk analysis. When you are dealing with large amounts of poorly contextualised alarms, NDR is often a better fit than SIEM.
The solutions typically provide centralised, machine-based network traffic analysis and response solutions, including efficient workflows and automation. The positioning in the network and help from machine learning provides a full insight and analysis of the network in order to identify and eliminate lateral movements in particular.
- Scope: Network and inter-device traffic
- Intention: Visibility/transparency of network traffic, detection of known and unknown threats and lateral movements, alerting and response
- Methods: Indicator of Attack (IoA), anomaly detection, user behaviour, machine learning
- Challenges: Advanced attacks and intrusions, malware-free attacks
Leading NDR technology partners
Tailored to your needs
Our strength lies in our flexibility and focus on developing tailor-made solutions for our customers. Discover in which areas we can support your IT team.
MDR Managed Detection & Response
Advance your security operations capabilities while reducing mean time to detect and contain threats.
XDR Extended Detection & Response
Alert aggregation, data analytics, and automated threat detection and response to simplify security.
EDR Endpoint Detection and Response
Deliver continuous, comprehensive endpoint visibility that spans detection, response and forensics to ensure nothing is missed and potential breaches are stopped.
EPP Endpoint Protection Platform
We provide a unified security approach that enables defenders to correlate threat activity across the entire network to protect every endpoint, fixed or mobile.
SIEM Security Information and Event Management
Intelligent security analytics for insight into your most critical threats.
Latest news and blog posts
10 key benefits of passive optical LAN for enterprise connectivity
Passive optical LAN has a lot of benefits for enterprise connectivity, speed and cost optimisation. Read the 10 benefits of passive optical LAN for enterprise connectivity.
Cemil Canturk from Nokia
The 4 key IT security assessment types
Different IT security assessment types are explained. Every day, digital attacks threaten the continuity of your business. Cybersecurity assessments accurately map out the threat.
Powering considerations of the ONTs in a passive optical LAN
Discover the powering options for passive optical LAN ONTs: local AC powering, local powering with battery backup and remote powering
Cemil Canturk from Nokia