Overview

The Proofpoint NexusAI Machine Learning has been part of the Proofpoint DNA for over 10 years. We leverage many AI and ML techniques to provide a people-centric approach to security.

Proofpoint NexusAI employs many techniques to detect the many targeted threats such as BEC, EAC, phishing, cloud attacks, multi-stage attacks, etc. For example, credential phishing attacks show inherent weakness as they mimic the look of an organization’s log-in page. This is difficult to detect by analyzing manually, but with NexusAI, we leverage computer vision to detect and prevent emails pointing to that site. We also leverage our NexusAI with our internal threat researchers. They use the NexusAI tools to better understand incidents as well as find like-incidents.

AI and ML systems are only as good as the data that trains them. Proofpoint is unique in that we gather threat data from leading enterprises across the Fortune 1000, leading ISPs and hundreds of thousands of SMBs. We also gather data from across multiple attack vectors such as email, cloud, network and social media:
• 2B+ daily emails scanned
• 16M+ cloud accounts monitored
• 6k+ worldwide IDS sensors
• 400k+ unique daily malware samples
• 400M+ domains monitored
• 100k+ social media accounts monitored

Data gathered across industries and geographies is fed into the Nexus Threat Graph to learn everything we can about threats and train our NexusAI. Everything learned from the data we see across our customer base is then fed back into Proofpoint products. This goes beyond only leveraging the data from a specific customer in our AI and ML models but expands from our entire customer base. This data sharing helps us better identify campaigns and attack patterns we see across the threat landscape to provide the best security and visibility for our customers to stay ahead of the threat landscape.