{"id":3104,"date":"2012-07-18T07:00:16","date_gmt":"2012-07-18T15:00:16","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=3104"},"modified":"2012-07-18T07:00:16","modified_gmt":"2012-07-18T15:00:16","slug":"big-data-data-sleuths-counter-security-attacks-with-intelligence-led-security","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/big-data-data-sleuths-counter-security-attacks-with-intelligence-led-security\/","title":{"rendered":"Big Data: Data Sleuths Counter Security Attacks With Intelligence-Led Security"},"content":{"rendered":"

Intelligence-led Security is a knowledge-based approach to detecting and predicting threats to security. \u00a0The data sets used in the analysis include things like \u00a0network packet capture, sensors, compliance monitoring, threat intelligence, and application and network audit logs. \u00a0Intelligence-led security works by applying Big-Data analytic techniques \u00a0to d<\/p>\n

As large data sets from virtualized environments are increasingly being collected, it becomes possible to construct a baseline signature of what normal behavior looks like and to compare \u00a0on-going operations against that baseline to identify and highlight deviations from the historical norm.<\/p>\n

A\u00a0white paper by security vendor Cyveillance<\/a> describes intelligence-led security as : “an emerging knowledge-based paradigm that is the opposite of local and reactive. \u00a0It looks for leading indicators among a wide range of global intelligence sources. \u00a0The shift from tactical, trailing-indicator security to expansive, intelligence-led security is already visible at leading companies that are starting to use findings derived from the public Internet as an early-warning system that can detect and predict threats from both the cyber and physical worlds.”<\/p>\n

Big-Data analytic techniques for example can be used to try to detect \u00a0Advanced Persistent Attacks (APT). \u00a0APT-style attacks are very unlike standard malware and typically occur slowly over a long period of time, and traditionally have been very difficult to identify. \u00a0The hope is that Big-Data will be able to analyze and correlate data from many different sources and to then identify and flag potential problems.<\/p>\n

The on-line site\u00a0SearchSecurity <\/a>quotes\u00a0Neil MacDonald<\/a>, Gartner vice president, said that “by 2016, 40% of enterprises \u2013 led by the banking, insurance, pharmaceutical and defense industries \u2013 will actively analyze patterns using data sets of at least 10 terabytes in order to flag potentially dangerous activities.”<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Intelligence-led Security is a knowledge-based approach to detecting and predicting threats to security. \u00a0The data sets used in the analysis include things like \u00a0network packet capture, sensors, compliance monitoring, threat intelligence, and application and network audit logs. \u00a0Intelligence-led security works…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-3104","post","type-post","status-publish","format-standard","hentry","category-big-data"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/3104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=3104"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/3104\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=3104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=3104"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=3104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}