Bitdefender, a global leader in cybersecurity, has introduced an industry-first solution that promises to revolutionize endpoint security and attack surface reduction. Bitdefender GravityZone Proactive Hardening and Attack Surface Reduction (PHASR) is designed to tailor security hardening to the individual user, dynamically adjusting security configurations based on user-specific privileges and behaviors. This dynamic approach ensures a continuous reduction in attack surfaces, providing a more adaptive and personalized level of protection.
"Over 70% of major security incidents today involve legitimate tools and Living-Off-the-land (LOTL) techniques," said Dragos Gavrilut, Vice President of Threat Research at Bitdefender. "GravityZone PHASR stands out as the only solution built specifically to address this epidemic, preventing LOTL-style attacks by controlling access to tools like PowerShell and WMIC right at the source."
The core of GravityZone PHASR lies in its ability to assess user behavior and restrict access to tools or privileges that deviate from established norms. It works by continuously analyzing application usage and resource access to dynamically enforce restrictions, effectively minimizing unnecessary risks and ensuring compliance.
As the cybersecurity industry evolves, Gartner® predicts that by 2030, 60% of exposure management tasks will rely on intelligent automation, a sharp increase from just 10% today. This shift highlights the industry's growing focus on preventative measures rather than detection. "Attack surface reduction includes all technologies designed to minimize an organization’s exposure to compromise," said Gartner, emphasizing the importance of proactive strategies, even against the most evasive attacks.
GravityZone PHASR integrates seamlessly with Bitdefender's flagship security platform, GravityZone. Built on years of research and machine learning applied to users, groups, applications, and endpoints within GravityZone's Extended Detection and Response (XDR), PHASR leverages proprietary AI to create individual and group behavioral profiles. This AI-driven technology helps identify vulnerabilities, assess potential attack vectors, and fortify defenses by focusing on key elements such as data access, application usage, and security permissions.
Andrei Florescu, President and General Manager at Bitdefender's Business Solutions Group, emphasized, "Innovation in cybersecurity should simplify solutions, not complicate them. GravityZone PHASR addresses today's pressing challenges, including stealthy LOTL attack techniques. By applying tailored security controls based on user behavior, it minimizes unnecessary access, hardens environments, and helps organizations stay ahead as attack surfaces expand."
Key benefits of GravityZone PHASR include a proactive approach to reducing threat exposure, streamlining compliance, and fortifying endpoints by focusing on user-specific behaviors and privileges. This innovative solution empowers organizations to combat evolving security threats with a highly tailored, dynamic defense mechanism.