Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

5/5/2018
01:15 PM
Steve Zurier
Steve Zurier
Slideshows
Connect Directly
Twitter
RSS
E-Mail
50%
50%

5 Ways to Better Use Data in Security

Use these five tips to get your security shop thinking more strategically about data.
Previous
1 of 6
Next

Image Source: sdecoret via Shutterstock

Image Source: sdecoret via Shutterstock

The current silo-style organization of threat researchers reviewing logs in one place, threat hunters in another, and the data scientists in yet another silo working on algorithms, just doesn't cut it anymore with today's security threats.

Security teams need to get smarter with how they use and manage all types of data. That's because the lines between pure infosec data (Web logs, threat intelligence) versus other business data have become increasingly blurred. A piece of Web log data, for example, could be just as easily used to identify attackers as it could to optimize the customer experience. The same holds true for business data as well.  

They need data science tools to detect threats, and the data scientists coming up with the algorithms have to work much more closely with threat hunters and threat researchers, experts say.

"I think security pros are becoming more like data scientists," says John Omernik, distinguished technologist at MapR. "But we can't have data science for data science's sake: We have to apply these new algorithms to our everyday business problems. My hope is that infosec pros realize that to advance their careers and for the good of the industry they will have to learn more advanced data management and data science skills.

"I want to break down the walls that infosec pros put up and the onus is on the security practitioners to learn these new skills," he says.

Joshua Saxe, chief data scientist at Sophos, says many infosec pros are using Coursera to learn data science. Saxe says while infosec pros need to understand data science, it's unlikely that most of them will get to the point where they are actually data scientists. 

"Becoming a data scientist does take a lot of foundation and it's hard to learn by yourself," Saxe says. "I think people in infosec need to think more like scientists versus hackers, and while people who are data scientists are more apt to come from top universities, there's always going to be a need for people who are not data scientists. Before you just had threat researchers; moving forward we'll have the data scientists working with the threat researchers."

Here are five ways experts say enterprise security teams can get smarter about how they use all types of data in their jobs. 

 

Steve Zurier has more than 30 years of journalism and publishing experience, most of the last 24 of which were spent covering networking and security technology. Steve is based in Columbia, Md. View Full Bio

Previous
1 of 6
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Kaitykatedn13
50%
50%
Kaitykatedn13,
User Rank: Apprentice
5/9/2018 | 2:48:22 AM
Re: Pending Review

This is a wonderful article, Given so much info in it, These type of articles keeps the users interest in the website,
and keep on sharing more ... good luck! * <a href="https://torrenttips.com/">torrents</a>
dannyjones
0%
100%
dannyjones,
User Rank: Apprentice
5/7/2018 | 2:15:41 AM
Re: Pending Review
Day by day, data science security increase rapidly.

I attended a conference which was organized in Los Angel, where they ware cover most of the topic which you discuss over hare.

Thanks for this information.
IrishKanagy
0%
100%
IrishKanagy,
User Rank: Apprentice
5/6/2018 | 3:40:59 PM
Nice
Nice
Sodinokibi Ransomware: Where Attackers' Money Goes
Kelly Sheridan, Staff Editor, Dark Reading,  10/15/2019
Data Privacy Protections for the Most Vulnerable -- Children
Dimitri Sirota, Founder & CEO of BigID,  10/17/2019
State of SMB Insecurity by the Numbers
Ericka Chickowski, Contributing Writer,  10/17/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
2019 Online Malware and Threats
2019 Online Malware and Threats
As cyberattacks become more frequent and more sophisticated, enterprise security teams are under unprecedented pressure to respond. Is your organization ready?
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-11674
PUBLISHED: 2019-10-22
Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack.
CVE-2019-12967
PUBLISHED: 2019-10-22
Stephan Mooltipass Moolticute through 0.42.1 (and possibly earlier versions) has Incorrect Access Control.
CVE-2019-17189
PUBLISHED: 2019-10-22
totemodata 3.0.0_b936 has XSS via a folder name.
CVE-2019-4523
PUBLISHED: 2019-10-22
IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 165481.
CVE-2019-17424
PUBLISHED: 2019-10-22
A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file.