2016 Cybersecurity Analytics State of the Union
•
4 likes•1,070 views
3 Things to Learn About: -Ponemon Institute's 2016 big data cybersecurity analytics research report -Quantifiable returns organizations are seeing with big data cybersecurity analytics -Trends in the industry that are affecting cybersecurity strategies
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (20)
Similar to 2016 Cybersecurity Analytics State of the Union
Similar to 2016 Cybersecurity Analytics State of the Union (20)
More from Cloudera, Inc.
More from Cloudera, Inc. (20)
Recently uploaded
Recently uploaded (20)
2016 Cybersecurity Analytics State of the Union
- 1. 1© Cloudera, Inc. All rights reserved. 2016 Cybersecurity Analytics State of the Union
- 2. 2© Cloudera, Inc. All rights reserved. Agenda • Introductions • Ponemon Institute’s 2016 Big Data Cybersecurity Analytics Report • The Future of Cybersecurity Analytics • Live Q&A
- 3. 3© Cloudera, Inc. All rights reserved. Rocky DeStefano Cloudera Subject Matter Expert, Cybersecurity Larry Ponemon Chairman and Founder, Ponemon Institute
- 4. 4© Cloudera, Inc. All rights reserved. Survey Question 1 • Can your SIEM provide you the cybersecurity analytics functionality you need (scale, types of data, cost, analytics, etc.)? • No • Yes • I don’t know
- 5. 5© Cloudera, Inc. All rights reserved. 2016 Big Data Cybersecurity Analytics Research Report Larry Ponemon
- 6. 6© Cloudera, Inc. All rights reserved. This report answers key questions… How wide spread is cybersecurity analytics? What is stopping organizations from adopting cybersecurity analytics? What are the most promising features of cybersecurity analytics? What are the benefits of cybersecurity analytics? … and more.
- 7. 7© Cloudera, Inc. All rights reserved. About the Survey Population 592 IT and IT security practitioners in the United States IndustryPosition Headcount 10 technology executives at 10 unique cybersecurity organizations developing Apache Hadoop based solutions. and…
- 8. 8© Cloudera, Inc. All rights reserved. Top big data cybersecurity analytic features…
- 9. 9© Cloudera, Inc. All rights reserved. … are reducing mean time to detection…
- 10. 10© Cloudera, Inc. All rights reserved. … and more effectively discovering advanced threats.
- 11. 11© Cloudera, Inc. All rights reserved. Organizations are taking notice of the results…
- 12. 12© Cloudera, Inc. All rights reserved. …. but it’s still difficult to deploy big data cybersecurity analytics.
- 13. 13© Cloudera, Inc. All rights reserved. What is stopping big data analytic adoption?
- 14. 14© Cloudera, Inc. All rights reserved. Can traditional systems meet expectations?
- 15. 15© Cloudera, Inc. All rights reserved. But Apache Hadoop based systems can.
- 16. 16© Cloudera, Inc. All rights reserved. Survey Question 2 • Are you using big data analytics for cybersecurity? • Basic user • Intermediate user • Advanced user • Not started
- 17. 17© Cloudera, Inc. All rights reserved. Where is the industry heading. Rocky DeStefano
- 18. 18© Cloudera, Inc. All rights reserved. Evolving cybersecurity analytic capabilities ComplexityofDetection Alerts Files Commodity Targeted Search Alerting Incident Response Hunting Forensics Validation Compliance Advanced Insider Logs Network Endpoint User Information Sources
- 19. 19© Cloudera, Inc. All rights reserved. Achieving Pervasive Cybersecurity Big Data Analytics 1 2 3 Gain complete enterprise visibility and context Large scale storage and flexible analytics Leverage the community for analytics
- 20. 20© Cloudera, Inc. All rights reserved. Apache Hadoop Scale Storage and Analytics 2006 2008 2009 2010 2011 2012 Present Core Hadoop (HDFS, MR) HBase ZooKeeper Core Hadoop Hive Pig Mahout HBase ZooKeeper Core Hadoop Sqoop Whirr Avro Hive Pig Mahout HBase ZooKeeper Core Hadoop Flume Bigtop Oozie MRUnit HCatalog Sqoop Whirr Avro Hive Pig Mahout HBase ZooKeeper Spark Impala Solr Kafka Flume Bigtop Oozie MRUnit HCatalog Sqoop Whirr Avro Hive Pig Mahout HBase ZooKeeper Parquet Sentry Spark Impala Solr Kafka Flume Bigtop Oozie MRUnit HCatalog Sqoop Whirr Avro Hive Pig Mahout HBase ZooKeeper Core Hadoop +YARN Core Hadoop +YARN Core Hadoop +YARN Future proofing your cybersecurity architecture with open source innovation. 1
- 21. 21© Cloudera, Inc. All rights reserved. Vodafone UK’s new SIEM system relies on Apache Flume and Apache Kafka to ingest nearly 1 million events per second. 1
- 22. 22© Cloudera, Inc. All rights reserved. NetworkUser Endpoint LogsApplication File Context Siloed data and applications limits analytics 2
- 23. 23© Cloudera, Inc. All rights reserved. Network User Endpoint Logs Application File Context Gain complete enterprise visibility and context 2 Apache Software Foundation Apache Spot (Incubating)
- 24. 24© Cloudera, Inc. All rights reserved. Choice Hotel processes 3500 security audited events per second while reducing security action latency from 2 days to a few seconds. 3
- 25. 25© Cloudera, Inc. All rights reserved. Leverage the open source community for analytics • Apache Spot on Cloudera’s platform and Intel hardware delivers unrivaled analytic performance and scale breaking down traditional barriers • Apache Spot has a shared open data model for analytic collaboration with industry peers • Apache Spot includes: • Community developed ingest pipelines • Out of the box machine learning analytics for anomaly detection • Jupyter notebook for custom analytics • Forensics workbench Apache Spot (Incubating) 3
- 26. 26© Cloudera, Inc. All rights reserved. Leverage the vendor community for analytics 3
- 27. 27© Cloudera, Inc. All rights reserved. Live Q&A
- 28. 28© Cloudera, Inc. All rights reserved. Get the report today! www.cloudera.com/cybersecurity
- 29. 29© Cloudera, Inc. All rights reserved. Thank you.
Editor's Notes
- State of the Union: The address not only reports on the condition of the nation but also allows the President to outline his legislative agenda (for which he needs the cooperation of Congress) and national priorities.
- The ever increasing complexity of attacks and the ever evolving nature of our data and systems forces a new approach to security. There is an undisputable need for more data and the equivalent analytic flexibility to process that data.
- The community will continue to grow and we will continue to contribute and adopt projects that help meet the needs of your organization today and tomorrow.
- About Choice Hotels: Choice Hotels International, Inc. is an American hospitality holding corporation based in Rockville, Maryland, in the United States. The company owns the hotel and motel brands Comfort Inn, Comfort Suites, Quality Inn, Sleep Inn, Clarion, Cambria Hotel & Suites, Mainstay Suites, Suburban Extended Stay, Econo Lodge, Rodeway Inn, and Ascend Hotel Collection. The company manages 6,379 properties worldwide. There are 505,278 rooms, with approximately $45.80 in revenue per room, totaling $758 million in revenue as of April, 2016. Challenge: Choice generated about 3500 security audited events per second (3% known hostile) in 2015. Model that out it turns into 302,400,000 events per day// 9,072,000 potential hostile events System didn’t respond fast enough to changing user behaviors causing potential customers to be treated like attackers Solution: Migrated homegrown system over to Cloudera Benefit: Total latency from event to security action can be lowered from two days to a few seconds. You can get a richer view of the threat landscape, so you understand the threats. That means you can do a better job catching the bad guys, and reduce the likelihood that you’ll hit a false positive and turn away a genuine sale. You can make your security decisions faster. Reacting to to threats fast gives you two big advantages; you don’t have to delay your legitimate customers for as long, and you’re going to close down the window that the criminals have time to operate in. Total latency from event to security action can be lowered from two days to a few seconds.