In IT Security, Where There's Smoke... There's Smoke

Comment | Print | RSS

1 saves

• Login to Rate

The expanded view needs to be broader and situational. It needs to incorporate conceptual awareness. It’s not a great example, but here goes... When arriving home from work recently (very late, of course), through the window I could see smoke in the kitchen. Instead of panic and a 911 call, I smiled. My brain instantaneously put all the data points together -- smoke, company coming over that night, bag of apples on the table that morning, plus prior history. My wife’s famous apple pie had bubbled over in the oven (again). When put into context, I knew it was a very good thing.

Areas of contextual awareness related to cyberthreats could include intelligence on:

• Who might target you and their plans
• What’s normal and not in your environment
• Your implementation of new systems, Websites, domains, applications
• Product introductions
• Other breaches in your industry, community

Big-data technologies are going to play a huge role in going beyond (but not totally replacing) the human involvement that is the contextual factor. Linkages will be made by data mining and applying advanced analytics to the mountains of unstructured data. To beat the attackers, you need to think like one and find their anomalous patterns. If you think only like a victim, expect to be in clean-up mode (like my wife with her apple pie).