A next generation domain monitoring platform to protect remote workers from phishing attacks (SearchLight2.0).

网络钓鱼攻击一直是组织防御的一个大问题。Verizon 2020年的DBIR显示，去年所有数据泄露中有22%涉及网络钓鱼。在英国，政府统计数据显示，86%的企业和85%的慈善机构将其归咎于网络钓鱼邮件/网站。仅在英国，网络钓鱼攻击每年就造成180亿英镑的收入损失，对公司的品牌声誉造成极大损害。它们还对更广泛的社会构成严重威胁，正如2018年对NHS的Wannacry勒索软件攻击所证明的那样。Wannacry导致了9200万英镑的清理费用（由纳税人支付）和19000次取消的医院预约。COVID-19大流行使问题进一步升级，因为企业通过远程工作来适应危机，因为办公室无法进入。这加速了数字化转型计划，即使封锁缓解，行业专家预测，在疫情结束后，远程工作仍将继续存在。目前的市场标准，以识别和删除网络钓鱼网站是严重的资源密集型。现有的解决方案，包括DS自己的市场领先产品（SearchLight），产生了许多误报，所有这些都是由人类分析其有效性的。这使得组织难以处理正在处理的域名数量，从而导致延迟通知组织潜在的网络钓鱼网站的多米诺骨牌效应，或者在那些组织中筛选假阳性以找到实际的网络钓鱼网站。根据ESG研究，“42%的网络安全专业人士表示，他们的组织忽视了大量的安全警报，因为他们跟不上数量”。searchlight2.0是一款革命性的下一代产品，将新颖的机器学习和数据科学技术应用于网络钓鱼网站检测。它将通过可扩展的自动化来识别、瞄准和根除网络钓鱼网站，将DS当前的警报时间框架从24-48小时缩短到不到1小时，并具有更高的准确性。

Phishing attacks have always been a huge issue for organizations to defend against. The Verizon DBIR for 2020 shows that 22% of all data breaches in the last year involved phishing. In the UK, Government statistics show that 86% of businesses and 85% of charities that experienced a breach attributed it to phishing emails/websites. Phishing attacks result in annual revenue losses of £18bn to the UK alone, and they are extremely damaging to a company's brand reputation. They also pose a serious threat to wider society, as demonstrated by the Wannacry ransomware attack on the NHS in 2018\. Wannacry resulted in clean-up costs of £92m (paid for by the taxpayer) and 19,000 cancelled hospital appointments.The COVID-19 pandemic has escalated the problem further, as businesses have adapted to the crisis through remote working as offices have been inaccessible. This has accelerated digital transformation programmes, and even as the lockdown eases, industry experts are forecasting remote working is here to stay beyond the lifetime of the pandemic.The current market-standard to identify and take down phishing websites is heavily resource intensive. Existing solutions, including DS's own market leading product (SearchLight) generate many false positives, all of which are analysed by humans for their validity. This makes it harder to scale in an organisation to be able to handle the number of domains being processed, causing a domino effect in a delay to notifying organisations of potential phishing websites, or in those organizations sifting through the false positives to find the actual phishing sites. According to ESG Research, "42% of cybersecurity professionals say their organization ignores a significant number of security alerts because they can't keep up with the volume".SearchLight2.0 is a revolutionary next generation product, applying novel machine-learning and data science techniques to phishing website detection. It will identify, target, and eradicate phishing websites with scalable automation, reducing DS's current alert timeframe from 24-48 hours to less than 1 hour and with greater accuracy.