Next Generation Insider Risk Management – Technical Exchange Meetings

Date: 03/07/2024

Vendor: DTEX Systems

Technology/Topic: Next Generation Insider Risk Management

TEM Video (milTube): https://www.milsuite.mil/video/watch/video/68045

______________________________________________

Welcome to the Technical Exchange Meeting (TEM)!

DTEX is the global leader in Insider Risk Management with over 20 years’ experience developing insider threat technologies. In 2017, DTEX was awarded a two-year Rapid Innovation Fund by DISA to research and develop a solution to automate the detection of lateral movement, flag unusual use of legitimate credentials and alert on situations of multiple, simultaneous login attempts and other anomalous user behaviors outlined in CNSSD 504. The successful completion of this project in 2019 led to the development of the DTEX InTERCEPT platform which combines the capabilities of a NITTF compliant UAM tool and UBA in an all-in-one lightweight, cloud-native platform.

Core Technology Differentiators:

1. Near zero impact to devices and network – collecting only 3-5MB of data per endpoint per day, near zero CPU usage, and effective in disconnected, virtual, intermittent, and low bandwidth network conditions, where continuous monitoring is required both on and off the agency network.

2. Enterprise scalability with near real-time analytics – the DTEX InTERCEPT streaming analytics architecture has overcome platform scalability limits often associated with traditional UAM products built upon traditional relational databases, enabling scalability to millions of endpoints.

3. Actionable Intelligence through Machine Learning and Alert Stacking – combining behavioral rules, machine learning/anomaly detection and stacked alerts reduces analyst overhead and significantly improves incident response times. This approach combined with a single, unified source of sensor data eliminates the high volume of false positives associated with UBA/UEBA solutions.

Core Business Differentiators:

a. Strategic Partnership with MITRE – the MITRE Corporation has partnered with DTEX specifically to uplift Five Eyes capability for Insider Threat detection and mitigation: https://insiderthreat.mitre.org/inside-r-protect/

b. Privacy Compliance – DTEX has a patent protected ‘privacy-by-design’ architecture which allows for proportional deployment of Focused Observation capabilities making it the ideal solution on unclassified networks where documented privacy concerns have been raised.

______________________________________________

To join the DISA TEM mailing list, please contact: disa.tem@mail.mil

______________________________________________

Disclaimer:

— TEMs do not serve as a marketing venue or request for proposal actions.

— TEMs shall not be interpreted as a commitment by the Government to issue a solicitation or ultimately award a contract.

— TEMs do not serve as an endorsement of any presented technologies or capabilities

— Presentations will not be considered as proposals nor will any awards be made as a result of a TEM session.

— TEMs are public open forums – no proprietary or sensitive information should be presented during TEM sessions. Only publicly facing content is permissible in DISA TEM sessions.