New capabilities aim to streamline analysis of digital-engagement platforms and help security teams prioritize threats on social channels
Social media security specialist ZeroFox today announced new automation capabilities to help organizations better manage risk on social media and other digital engagement platforms.
The Lowdown: The features being added to ZeroFox’s cloud-based social media protection platform are aimed at giving defenders a more efficient and automated way to detect threats in social posts and images, something many organizations currently handle manually.
The Details: According to ZeroFox, the vendor is incorporating artificial intelligence (AI), optical character recognition (OCR), and natural language processing (NLP) to speed and automate the analysis of content on social and digital channels. Specifically, the improvements include:
• Extracting meaning from images – the addition of computer vision tools allows security teams to get clearer indications of threats buried in online items like selfies and memes. The combination of OCR with face and logo detection and comparison tools lets defenders extract text from images and spot modified images that may signal hidden risks.
• Interpreting human language – NLP tools go a step beyond word matching with the addition of sentiment analysis, which detects types and amount of negativity expressed in text-based messages. NLP also enables scam and fraud detection by alerting to the presence of malicious Web links.
When it comes to safeguarding modern organizations, security service providers need to be hype- aware of a client’s social media footprint and exposure. The more information an organization posts online, the more vulnerable it becomes. Every social connection is a potential leak of sensitive information and opportunity for malicious access, and the same personal information that can be so engaging in marketing can be commandeered to conduct attacks against business leaders and their associates.
Recent FBI warnings highlight the actions of predators, hackers, competitors, and agents of foreign governments actively trolling social media in search of information on executives and brands to target for exploitation. Security partners must remember that information gleaned from social sites can be used to fuel attacks launched from both inside and outside the social networking environment, including Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) attacks, pharming, phishing and click-jacking, elicitation, identity theft and impersonation, and false flag and reconnaissance attacks.
The Buzz: “Enterprises are overwhelmed by rich media-based threats to their brand and business, and they are relying too heavily on manual human analysis and SOC teams,” said James C. Foster, CEO of ZeroFox. “ZeroFox dramatically reduces the burden on organizations by offering expert human analysis through the ZeroFx Alpha Team coupled with powerful AI and computer vision capabilities.
“For our customers, this means they now have the ability to more efficiently and accurately identify and remediate critical risks based on varying use cases that many organizations face today across social media, surface, mobile, deep, and dark Web,” Foster added.
“As organizations increase their use of digital marketing techniques, the number of posts, images, videos, and sites security teams need to analyze is growing exponentially. It’s nearly impossible for them to get through everything, let alone spot a potential threat,” said ZeroFox CTO Mike Price. “Leveraging tools that are powered by AI, which have the ability to sort through and analyze millions of data points in a matter of seconds, enables security teams to search, identify, and prioritize the greatest threats to their organization.”
Channelnomics Point of View: