\n
![](\"https:\/\/i0.wp.com\/www.rsoftsolution.com\/blog\/wp-content\/plugins\/RSSPoster_PRO\/cache\/a9720_gettyimages-492752984.jpg?w=640&ssl=1\")
<\/p>\n
\n<\/p>\n
Over the years, Druva<\/a> has developed services for protecting and managing data and tools for governance and compliance. Today, it took that\u00a0idea one step further when it added ransomware and anomaly detection.<\/p>\n The company decided to develop a ransomware detection tool after finding that customers were using Druva to help manage the ransomware recovery process. Restoring data has always been a Druva strength, and it made sense to put the two together, CEO Jaspreet Singh explained.<\/p>\n \u201cWe saw a bunch of customers use the whole notion of data management for malware\/ ransomware recovery. Our customers had a malware\/ransomware tool and us as recovery, but putting the two together was challenging,\u201d Singh told TechCrunch.<\/p>\n That\u2019s when the company decided it might make sense to build its own anomaly detection tool and move from being purely reactive \u2014 helping recover from an incident \u2014 to being proactive and helping manage\u00a0the\u00a0incident.<\/p>\n Moving into this realm presented challenges for Druva, and they admit it took time to create a system that didn\u2019t produce a lot of false positives. When you are looking for anomalies in a data management tool like Druva, many everyday activities like a system update or a critical eDiscovery action could seem like unusual activity. The key was finding what was actually malware.<\/p>\n The company tapped into machine learning algorithms to help understand the data better and reduce those false positives. \u201cMachine learning is becoming a commodity in 2017. We\u2019re using machine learning for course correction and understanding how the files change, rather than broad stroke anomaly detection focusing on one use case,\u201d Singh said.<\/p>\n While Druva recognizes that it won\u2019t be the first line of defense for bigger companies, it believes having this kind of protection in place will be really valuable for the small to mid-market customers who lack protection and recovery for ransomware attacks, while acting as a secondary line of defense for those that have other tools in place.<\/p>\n \u201cOne thing to keep in mind, with ransomware, you need a two-layer approach to protecting the business. Ransomware is created and adapted so fast, it\u2019s hard to keep up protection. We are a second line of defense and providing another tool in the toolbox to help minimize the blast radius of attacks,\u201d Dave Packer, Druva\u2019s VP of corporate and product marketing explained.<\/p>\n Druva was founded in 2008 and has raised $118 million, including its most recent $51 million round last September<\/a>.<\/p>\n <\/p>\n