Symantec Promotes AI Capability to Predict Attackers’ Next Moves

· Original article ↗

Summary

Symantec says Incident Prediction analyzes behavioral patterns from 500,000 attack chains to anticipate attackers’ next steps. The company claims it identifies high-confidence sequences in 80% of real-world incidents and can support early disruption.

Key points

  • Symantec describes Incident Prediction as using behavioral analysis and probability scoring to forecast likely steps in an active attack.
  • The company says the capability was trained on more than 500,000 attack chains analyzed by Symantec and Carbon Black Threat Hunters.
  • Symantec claims the system identifies high-confidence attack sequences in 80% of real-world incidents.
  • The article describes correlating signals across domains, such as a phishing-delivered beacon, network-share listing, and remote scheduled task.
  • Symantec says defenders can use predictions to disrupt attack chains early and apply protective policies that revert to baseline after a threat is neutralized.

Article Details

Event Type
Promotional article about a predictive AI cybersecurity capability.
Impact
The article describes Incident Prediction, part of Symantec CBX, as using behavioral analysis and probability scoring to anticipate an attack’s next three to four moves and potentially disrupt it before impact. It claims the capability identifies high-confidence attack sequences in 80% of real-world incidents and was trained on more than 500,000 attack chains analyzed by Symantec and Carbon Black Threat Hunters.

Vendors

Products

Related Articles