The new overwatch security pillar acts as an infection detection, containment, and remediation engine that is automatically triggered when a threat has bypassed detection by the existing "in-line" infrastructure and has infiltrated the enterprise network. The overwatch security layer uses data from a real-time reputation and behavioral correlation database to detect active data-stealing malware and other potential threats. IDC believes that layered, in-line threat detection and threat overwatch architectures provide enterprises with a higher degree of security and are capable of addressing more of their security requirements when compared with legacy security infrastructure architectures. The key benefits are real-time overwatch,.
