Overview

Enterprises and public sector agencies face advanced persistent threats that bypass traditional security. NTT Ltd.’s Threat Detection services, powered by capabilities in machine learning, advanced correlation, threat behavior modeling and global threat intelligence, deliver advanced detection by providing the bigger picture context across seemingly unrelated events. The service offers sophisticated threat detection capabilities, 24/7 threat monitoring, and comprehensive threat intelligence supported by the NTT Global Threat Intelligence Center (GTIC).

Threat Detection Standard provides a sophisticated, automated service for organizations looking for entry-level threat detection. The logic is built out using machine learning, creating a “machine copies human” message.
Threat Detection Enhanced offers advanced detection of sophisticated attack types, through advanced analytics, threat intelligence and threat hunting. Security analysts hunt through all monitored assets to create a clear picture of “who, what, when, where, why, how” for the client. Security analysts support the client’s remediation activities until closed.

NTT Ltd.’s Threat Detection identifies security threats that may evade standard forms of detection, and detects them faster. The service is based on NTT’s real-time correlation engine (RTCE) with machine learning and threat behavior modeling; deeper incident investigation by Security Analysts with dedicated toolkits and additional data (meta / inspector / mal-lab / custom-developed acquisition tech); and event-based threat hunting with actionable incident escalation. The differentiated advantages that NTT brings to this service, based on NTT’s global scale, include: data from 10,000+ clients and the NTT Global IP Backbone, which carries a large proportion of the world’s Internet traffic; global Threat Intelligence resources; and a full view of the client’s estate, including network, endpoint, cloud, etc. Another key differentiator for this service is analyst quality and toolsets. NTT’s analyst workbench includes custom-developed tools such as a war lab for investigation of powerful malware, PCAP data analysis and powerful correlation engines.