Access and Feeds

Big Data and Intelligence-Driven Security: Smart Machines Attempt to Re-Invent Security

By Dick Weisinger

Within the next two years, Big Data will disrupt the status quo in most information security product segments, including fraud detection, governance, risk and compliance, network monitoring, and user authentication and authorization.  That’s the prediction made in an EMC/RSA whitepaper titled Big Data Fuels Intelligence-Driven Security.

Eddie Schwartz of RSA, the security division of EMC, said that “Intelligence-driven security reinforces the idea that no man is an island. When organizations combine outside information with all of their own data that’s available to them they start to see a more informed view of threats…  In the coming year, top-tier enterprises with progressive security capabilities will adopt intelligence-driven security models based on Big Data analytics.  Over the next two to three years, this security model will become a way of life.”

According to an ESG Research report, 47 percent of enterprise organizations collect 6TB of security data or more on a monthly basis to support their cyber-security analysis requirements. Furthermore, 43% of enterprise organizations collect “substantially more” security data then they did 2 years ago while an additional 43% of enterprise organizations collect “somewhat more” security data then they did 2 years ago.  The type of data that’s being collected includes activities, firewall logs, asset data, vulnerability scans, and DNS logs.  Increasingly organizations are also beginning to collect large volumes of network data packets.

The RSA report found that “Big data analytics, when used within an intelligence-driven security program, automates many risk assessments and threat detection processes and puts the advantage of time back in an organization’s hands.  Big data analytics also helps enhance situational awareness and shorten reaction times to potential risks and problems.”

That’s not to say that getting from the current state of security to one that’s ‘intelligence driven’ will be a slam dunk.  Jon Oltsik, principal analyst at Enterprise Strategy Group (ESG) Research, reports on the findings from a survey on data security analytics:

  • 54 percent are experiencing “significant difficulties” or “some difficulties” with security data normalization
  • 54 percent are experiencing “significant difficulties” or “some difficulties” with security data capture
  • 52 percent are experiencing “significant difficulties” or “some difficulties” with security data sharing

Vendors in the Big Data Security segment include EMC/RSA, Red Lambda, Palantir, and startup CrowdStrike.

Digg This
Reddit This
Stumble Now!
Buzz This
Vote on DZone
Share on Facebook
Bookmark this on Delicious
Kick It on DotNetKicks.com
Shout it
Share on LinkedIn
Bookmark this on Technorati
Post on Twitter
Google Buzz (aka. Google Reader)

Leave a Reply

Your email address will not be published. Required fields are marked *

*