Pages

Jan 15, 2013

Big Data Revolution in Information Security

RSA today released a Security Brief asserting that 

  • The dissolution of traditional defensive perimeters coupled with attackers’ abilities to circumvent traditional security systems requires organizations to adopt an intelligence driven security model that is more risk-aware, contextual, and agile.
  • Intelligence-driven security relies on big data analytics. Big data encompasses both the breadth of sources and the information depth needed for programs to assess risks accurately and to defend against illicit activity and advanced cyber threats.
  • Within the next two years, we predict big data analytics will disrupt the status quo in most information security product segments, including SIEM; network monitoring; user authentication and authorization; identity management; fraud detection; and governance, risk & compliance.
  • In the next three to five years, we predict data analytics tools will further evolve to enable a range of advanced predictive capabilities and automated real-time controls.
  • Integrating big data analytics into business risk management and security operations will require organizations to rethink how information security programs are developed and executed. Six recommendations are presented in the section titled Building a Big Data Security Program.
  • Security teams need analysts who combine data science with a deep understanding of business risks and cyber-attack techniques. Personnel with these skill sets are scarce, and they will remain in high demand. As a result, many organizations are likely turn to outside partners to supplement internal security analytics capabilities.


Read more on