That was the defense, and it was relatively straightforward to implement.

But fast-forward to today and the traditional perimeter defense method no longer works, primarily because of two big changes in business: the rise of mobile employees and the wide adoption of cloud services.

While cyber activity was once easy to classify as “good” or “bad,” now there are gray areas.

This presents a problem for event-centric security’s static policies, forcing them to make calls about cyber activity without context.