Attacks/Breaches

10/18/2016
04:00 PM
Kelly Sheridan
Kelly Sheridan
Slideshows
Connect Directly
Twitter
LinkedIn
Google+
RSS
E-Mail
50%
50%

7 Regional Hotbeds For Cybersecurity Innovation

These regions are driving cybersecurity innovation across the US with an abundance of tech talent, educational institutions, accelerators, incubators, and startup activity.
Previous
1 of 8
Next

As cybersecurity becomes more of an imperative for individuals and organizations, several regions in the US are investing money and efforts in security innovation.

Silicon Valley may be the most famous hotspot for tech innovation in the country, but it's far from the only place driving cybersecurity advancement. Areas such as the Washington, DC region and the Boston metro area are home to a growing number of security startups and incubators.

There are several factors that contribute to making an area a hotbed for security innovation, explains Rick Gordon, managing partner at cybersecurity startup accelerator Mach37. Some critical elements include availability of seed capital and educational institutions generating new talent.

"Cyber is an area where innovation is built and based on extent of experience and knowledge," says Bob Ackerman, founder of cybersecurity venture capital firm Allegis Capital. The technology is deep, and the ability to develop and apply it requires a lot of experience.

The problem is, the industry is struggling with a shortage of skilled security engineers, he continues. Regions are trying to fill the gap by building programs to graduate more skilled graduates and using technology to increase the productivity of existing engineers.

Many colleges and universities have begun to respond to the shortage in engineering talent by expanding their curricula to include cybersecurity. UC Berkeley, UC Santa Barbara, Carnegie Mellon, MIT, and Georgia Tech are among institutions fueling tech innovation with trained graduates.

Even in regions known for technological innovation, it can be difficult for security startups to succeed because they need more than tech talent to achieve growth. Oftentimes, tech talent moves to areas where business expertise and a strong venture capital ecosystem will support innovation.

For this reason, security businesses have begun to emerge in regions where they have access to capital, skills, and opportunities needed to grow. These regions are primarily located on the east and west coasts of the US, but some have begun to pop up in the south and the middle of the country.

"Cybersecurity is an area driven by nonstop innovation," explains Ackerman. "The half-life of cybersecurity is one of the shortest in IT. We focus on these regions because in cybersecurity, if you're going to compete, you have to have a solid foundation to start. You can't pick it up as you go."

Here, we spotlight some regions across the US driving innovation in the cybersecurity space through factors like education, accelerators, and other support for entrepreneurs and startups looking to grow.

 

Kelly Sheridan is Associate Editor at Dark Reading. She started her career in business tech journalism at Insurance & Technology and most recently reported for InformationWeek, where she covered Microsoft and business IT. Sheridan earned her BA at Villanova University. View Full Bio

Previous
1 of 8
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
futon45
50%
50%
futon45,
User Rank: Apprentice
10/20/2016 | 8:13:07 AM
futon mattress
Excellent blog

One in Three SOC Analysts Now Job-Hunting
Kelly Jackson Higgins, Executive Editor at Dark Reading,  2/12/2018
Encrypted Attacks Continue to Dog Perimeter Defenses
Ericka Chickowski, Contributing Writer, Dark Reading,  2/14/2018
Can Android for Work Redefine Enterprise Mobile Security?
Satish Shetty, CEO, Codeproof Technologies,  2/13/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: One agent too many was installed on Bob's desktop.
Current Issue
How to Cope with the IT Security Skills Shortage
Most enterprises don't have all the in-house skills they need to meet the rising threat from online attackers. Here are some tips on ways to beat the shortage.
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.