Endpoint protection began life as signature-based antivirus programs sitting on endpoints themselves. Over the years, the science of endpoint protection has advanced considerably to include behavior analysis and eventually machine learning and artificial intelligence to uncover threats, even as the brains of those operations tended to shift deeper into the network. Many endpoint protection programs today don’t actually sit on endpoints anymore, and perhaps only reach out to them if threats attempt lateral movement and trigger a response.
