NDR
Technology & Computing abbreviation · Cybersecurity
| Stands for | Network detection and response |
|---|---|
| Categories | Technology & Computing |
NDR stands for Network detection and response, a cybersecurity abbreviation.
Security tools that analyze network traffic with behavioral models and machine learning to spot threats such as lateral movement, data exfiltration and command-and-control beacons that endpoint tools may miss.
Example: NDR spotted an unmanaged printer contacting a server abroad every five minutes.
Usage notes
Grew out of network traffic analysis products around 2020. It is especially valuable for devices that cannot run endpoint agents, such as IoT and industrial equipment. Widespread encryption limits what it can inspect, so it relies heavily on metadata and traffic patterns. NDR, EDR and SIEM together are sometimes called the SOC visibility triad.
Related abbreviations
More cybersecurity abbreviations
- MDR – Managed detection and response
- MFA – Multi-factor authentication
- MITM – Man-in-the-middle
- MSSP – Managed security service provider
- mTLS – Mutual TLS
- NAC – Network access control
- NGFW – Next-generation firewall
- NTLM – NT LAN Manager
- NVD – National Vulnerability Database
- OAuth – Open Authorization
- OIDC – OpenID Connect
- OSCP – Offensive Security Certified Professional