Cybercriminals are using these changes to stay one step ahead of us through deceptive tactics, such as malware, phishing schemes, ransomware, credential stuffing and domain hijacking. These strained teams often find themselves drowning in false positives: Organizations, on average, receive 5,000 alerts a day, and cybersecurity professionals can usually only investigate 10 to 20 in a single shift. Through sophisticated algorithms and predictive intelligence, these tools hunt down malware, run pattern recognition, and find and thwart attacks before they can cause damage. As AI and machine learning continue to advance, we should develop capabilities that consider the risk tolerance of individual organizations in assessing activity and threats so teams can work on a finite number of alerts, while maintaining an acceptable level of protection. He holds two Master of Science degrees: one in physics from the Indian Institute of Technology in Kanpur, India, and one in electrical and computer engineering from the University of Texas.

Cybersecurity is constantly changing because technology and hackers are always on the move. In the 1980s, we had antivirus software. In the 1990s, we determined rules and installed firewalls to ensure only good activity, users and traffic were allowed in our networks. By 2000, we added network intrusion detection. In 2010, we had web application firewalls and introduced second-generation WAFs. Then came the cloud and learning how to store and secure data off premises.