A next generation domain monitoring platform to protect remote workers from phishing attacks (SearchLight2.0).

下一代域监控平台，可保护远程工作人员免受网络钓鱼攻击（SearchLight2.0）。

• 批准号: 10004714
• 金额: $ 37.43万
• 依托单位: DIGITAL SHADOWS LTD
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2021
• 资助国家: 英国
• 起止时间: 2021 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10004714
• 关键词: next; generation; domain; monitoring; platform

Phishing attacks have always been a huge issue for organizations to defend against. The Verizon DBIR for 2020 shows that 22% of all data breaches in the last year involved phishing. In the UK, Government statistics show that 86% of businesses and 85% of charities that experienced a breach attributed it to phishing emails/websites. Phishing attacks result in annual revenue losses of £18bn to the UK alone, and they are extremely damaging to a company's brand reputation. They also pose a serious threat to wider society, as demonstrated by the Wannacry ransomware attack on the NHS in 2018\. Wannacry resulted in clean-up costs of £92m (paid for by the taxpayer) and 19,000 cancelled hospital appointments.The COVID-19 pandemic has escalated the problem further, as businesses have adapted to the crisis through remote working as offices have been inaccessible. This has accelerated digital transformation programmes, and even as the lockdown eases, industry experts are forecasting remote working is here to stay beyond the lifetime of the pandemic.The current market-standard to identify and take down phishing websites is heavily resource intensive. Existing solutions, including DS's own market leading product (SearchLight) generate many false positives, all of which are analysed by humans for their validity. This makes it harder to scale in an organisation to be able to handle the number of domains being processed, causing a domino effect in a delay to notifying organisations of potential phishing websites, or in those organizations sifting through the false positives to find the actual phishing sites. According to ESG Research, "42% of cybersecurity professionals say their organization ignores a significant number of security alerts because they can't keep up with the volume".SearchLight2.0 is a revolutionary next generation product, applying novel machine-learning and data science techniques to phishing website detection. It will identify, target, and eradicate phishing websites with scalable automation, reducing DS's current alert timeframe from 24-48 hours to less than 1 hour and with greater accuracy.

网络钓鱼攻击一直是组织需要防御的一个大问题。Verizon 2020年的DBIR显示，去年所有数据泄露事件中有22%涉及网络钓鱼。在英国，政府统计数据显示，86%的企业和85%的慈善机构经历了入侵，将其归因于钓鱼电子邮件/网站。网络钓鱼攻击仅在英国每年就造成180亿英镑的收入损失，对公司的品牌声誉造成了极大的损害。它们还对更广泛的社会构成严重威胁，2018年对NHS的Wannacry勒索软件攻击就证明了这一点。Wannacry导致清理费用达到9200万GB(由纳税人支付)，1.9万个医院预约被取消。新冠肺炎疫情进一步加剧了这个问题，因为企业已经通过远程工作来适应危机，因为办公室一直无法访问。这加快了数字化转型计划，即使封锁放松，行业专家也预测，远程工作将持续到危机结束后。目前识别和关闭钓鱼网站的市场标准严重耗费资源。现有的解决方案，包括DS自己的市场领先产品(Searchlight)会产生许多假阳性，所有这些都由人类分析其有效性。这使得在组织中更难扩展以能够处理被处理的域的数量，从而在延迟通知潜在钓鱼网站的组织中或在筛选假阳性以找到实际钓鱼网站的组织中造成多米诺骨牌效应。根据ESG Research的数据，“42%的网络安全专业人士表示，他们的组织忽视了大量的安全警报，因为他们跟不上数量。”SearchLight2.0是一款革命性的下一代产品，将新颖的机器学习和数据科学技术应用于钓鱼网站检测。它将通过可扩展的自动化来识别、打击和根除钓鱼网站，将DS当前的警报时间范围从24-48小时缩短到不到1小时，并具有更高的准确性。