Dwell Time Reduce Blog Image

The trouble with dwell time

Dwell time, the period between when an attack occurs and when it is discovered, continues to be a serious problem for security professionals. The most recent Ponemon cost of a data breach study estimates the average dwell time for malicious attacks is now at 229 days — a long time for hacker activity to proceed unchecked. In fact, the term “dwell time” is somewhat misleading, since it implies the malware or exploit is sitting idly, waiting for you to find it. On the contrary, dwell time is the criminal hacker’s best friend because it provides a window of opportunity for lateral movement and expanding the scope of their malicious operations.