Future Crew: Cicada8 A platform for continuous monitoring of the security of organizations

Main article:

• Security Information and Event Management (SIEM)
• Firewall

2023: Issue of Cicada8

On March 30, 2023, the MTS RED Future Crew Innovation Center announced the release of the Cicada8 platform for continuous comprehensive control of the security of organizations using artificial intelligence.

Cicada8 interface

According to the company, the solution is based on an integrated approach to security control: Cicada8 not only allows you to control the vulnerability of external infrastructure to cyber attacks, but also monitors the appearance in the media, Telegram and the darknet of publications about cybersecurity incidents at the customer, such as leaks or hacking. This provides companies with the ability to proactively optimize their security and respond quickly to possible cyber attacks.

The solution continuously analyzes the external IT perimeter of organizations, identifies "blind spots" in protection and identifies open vulnerabilities. To form a list of auditable vulnerabilities, company experts use both public sources and shadow resources of the darknet. The platform uses modern cybersecurity technologies, including those based on artificial intelligence.

All results of the analysis are verified by company experts who have international certificates in the field of information protection. Based on the results of the audit, they form reports on the identified cybersecurity problems and recommendations for their elimination. This reduces the number of false positives to zero and allows companies' information security services to fix security gaps. told Alexey Kuznetsov, technical head of the Cicada8.

In 2022, information appeared every month about more than 2,500 vulnerabilities, which were then used by attackers to carry out mass or targeted attacks aimed at a specific company. At the same time, the average lifetime of a vulnerability on the perimeter of organizations is about 45 days. The standard method of solving this problem is to conduct regular penetration tests. The Cicada8 platform provides continuous testing. This ensures that business knowledge of the level of protection against possible cyber attacks is constantly relevant. In addition, the minimum period required to identify current cyber threats using standard penetration testing averages eight weeks. Using Cicada8 for this purpose will reduce this period to one week.

At the same time, the Cicada8 is also more optimal compared to automatic vulnerability scanners due to the fact that it not only checks the security of the well-known external infrastructure of companies, but also detects the entire possible surface of the attack, including those workstations, servers and systems that have not yet come under the control of information security services.

All audit results are available to customers in a closed personal account on the portal, where they can track changes in the external infrastructure, learn about vulnerabilities, monitor the status of their elimination and generate reports for top management and regulators. Companies with geographically distributed infrastructure can also monitor the level of security of subsidiary assets and branches in a single personal account.