In the information security field, bad actors have the advantage: They play proactive offense while security is generally reactive in defense. To take a more proactive footing, some organizations have been adopting threat intelligence, a security practice that involves sifting through data to identify advanced persistent threats (APTs) before attacks occur. Firms such as Ellie Mae, which provides a cloud-based platform that processes about 44 percent of mortgage applications in the U.S., have taken threat intelligence a step further by leveraging predictive analytics to deploy autonomous threat hunting.
“The nature of threat hunting is very proactive,” says Selim Aissi, senior vice president and chief security officer at Ellie Mae. “You don’t wait until an attack has happened. You explore, prioritize, and investigate threats before an attack happens or even before a malware is known.”