Decision Zone Inc. Information

More than 66% of breaches go undetected for months or years in some cases (Verizon DBIR). With high profile breaches of national critical infrastructures and government agencies in the headlines daily – we all know very well it is a matter of when rather than if. The minimizing of time between a breach and detection could be the difference between a catastrophic event on a national grid and simple detection and containment that averts it. Decision-Zone's technology ensures the time between a breach and detection is minimal, in seconds or less, as it monitors the messaging between systems, applications and/or components and alerts on any deviations from expected behavior. Decision Zone's Deep Message Inspection (DMI) shifts the paradigm from conventional security controls (IPS, SIEM) that are premised on catching-up to the ever-changing threat actor space which takes them past the point of diminishing returns, i.e. consuming increasing resources and yielding less benefit relative to investment. DMI provides Message Bus Security and is the next generation of security monitoring technology, bringing efficiency and scalability to IT and OT/IoT architectures, at once. Decision-Zone uses DMI to monitor business logic on the message bus for the correct order of operations to detect and remediate malware compromises, system defect or administrative errors for real time business and security management. This is a departure from the current historical approach to business and security management, where millions of permutation causes are first modeled and monitored inside databases for compromises. Conventional tools like firewalls, IPS and SIEM cannot be easily configured to detect business logic, if at all. They have not been developed for this form of monitoring. Instead, firewalls and IPS have been developed to monitor network flows and heuristics at lower levels in the protocol stack – where business logic is transparent.