CIOs Defend Against Cybersecurity Threats Using Behavioral Analytics

CIOs are begining to use tools that use anomaly-detecting analytics and machine learning algorithms to protect their companies’ data.

Companies are investing more money in emerging technologies that can help anticipate and detect a variety of threats, including phishing scams and advanced persistent threats, both of which are weighing heavily on the minds of corporate board members. 

“Our level of investments is increasing because of the increasing capabilities of the threat actors,” says Bob Worrall, CIO of Juniper Networks, who spent 12 percent more on cybersecurity tools in 2016 that he spent in 2015. His budget will increase more in 2017 as he purchases tools to shield Juniper’s corporate data and intellectual property. “As the bad guys get smarter we have to as well.”

Cybersecurity spending has seen a significant uptick since the watershed 2013 breach at US retailer Target and has continued throughout massive breaches at Home Depot, Anthem and Sony Pictures. The latest high-profile corporate victim is Yahoo, which reported in September that hackers had pilfered account information of more than 500 million customers and revealed last week that hackers made off with information on 1 billion users in 2013. The distinct hacks leveraged flaws in Yahoo's defenses, including a cryptography standard many experts deemed insufficient.

The omnipresent threats, in which perpetrators sometimes burrow into networks and quietly steal information for several months or years, are why Gartner says cybersecurity spending will top $82 billion in 2016, an 8 percent hike from 2015. Concerned CIOs are imploring corporate boards to let them invest in cutting-edge technology that protect and thwart attacks.

Proactive protection is the key

Worrall says he currently uses three predictive analytics tools that detect anomalous network access, such as when someone using an employee’s valid Juniper credentials accesses information they don't normally access for work.

Such digital forensics can also determine whether the malicious actor was pinging the network from another country, as well as other details that help "stitch together various events and detect anomalous behavior humans couldn’t detect," Worrall says. Each of Juniper’s behavioral analytics tools fills a gap in network protection, says Worrall, who declined to name the tools because he did not to invite hackers to probe his security defenses.

Using artificial intelligence and machine learning technologies will help companies take a more proactive approach to corporate defense, says Mike Kail, chief innovation officer at startup Cybric, which focuses on integrating security as software is created.

But Kail, who was Yahoo's CIO when the first hack purportedly tool place, says that companies must integrate such tools with technologies and business processes for validating user authentication and authorization. He says that such a solution could leverage blockchain, the digital ledger software that ensures trust between parties exchanging cryptocurrencies such as Bitcoin, will emerge in 2017.

Boards free up budget but expect proof of protection

It’s no secret that boards are loosening the purse strings for cybersecurity but CIOs will continue to struggle to balance their cyber investments against managing risks to their businesses. Put another way: The choice between what to buy, implement and tune first, the shiny new behavioral analytics platform or the latest and greatest business email compromise stopper, poses prioritisation challenges many CIOs aren't accustomed to in this age of cyber warfare.

Worrall says that even if their boards allocate more funds for cybersecurity, CIOs need to beware of budget abuse. Those who take the “sky is falling” approach become chicken little, he says. One advantage Worrall has working for a networking technology company is that his tech savvy board grasps the intricacies of cyber defense.

"I can have a conversation about risks at a technical level many of my CIOs peers can’t at other organisations," Worrall says. He says he is fortunate that he can discuss business risks with his board that focus on mitigating risks to the point of immateriality rather than the cost of cyber tools.

Evidence that boards have become more attuned to cyber risk has materialized in executive recruitment, where companies are looking for savvy leaders who can articulate security risks in a way that business leaders can easily grasp.

Gerry McNamara, global managing director of the information officers practice at executive recruiter Korn/Ferry International, says that his corporate boards are interested in finding CIO and CISOs candidates who can help accelerate their businesses’ cyber profiles relative to their peers.

“The boards are really engaged in digital and cyber right now, asking: Where are we on cyber? Are we protected? Are we keeping our information private? How do you know that it is? Prove to me that it is,” McNamara says. “We have a lot of work going on in cyber mapping of talent.”

Unfortunately, even the best talent and the latest technologies aren’t enough in an era when politicians such as John Podesta and the other folks at DNC as well as top executives can be duped to click on a malicious email whose origin and content appear innocuous, or a user puts the wrong USB into their PC.

“What we’ve all learned unfortunately is that humans are the weakest link in security,” Worrall says. “You can put up the biggest castle wall but as soon as one person connects an infected laptop to the network, it’s game over.”

CIO.com     Behavior Analytics Tools For Cyber-Security:   The Science of Threat Intelligence:  

Company Boards Need To Get A Grip:

 


 

« Driverless Future Won't Start With Self-driving Cars
Shades of Watergate – The Fake Russian Hacking »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

RISA

RISA

RISA solutions help to secure networks, improve overall network security, and achieve government regulatory compliance.

Interpol

Interpol

Interpol is the world’s largest international police organization. It is committed to the global fight against cybercrime, as well as tackling cyber-enabled crimes.

Nordic IT Security

Nordic IT Security

Nordic IT Security is a cyber security business forum in Scandinavia bringing together the converging worlds of IT, Cyber and Information Security.

National Institute of Information and Communications Technology (NICT)

National Institute of Information and Communications Technology (NICT)

NICT is Japan’s sole National Research and Development Agency specializing in the field of information and communications technology.

Magtech Solutions

Magtech Solutions

Magtech Solutions is a one-stop IT Solutions provider offering Cloud Computing, IT Security, Unified Email Solutions and ERP systems.

Cryptshare

Cryptshare

Cryptshare is a communication solution that enables you to share e-mails and files of any size securely.

Brimondo

Brimondo

At Brimondo we help you to maximize and protect your brand value by being a proactive and strategic partner within brand protection with experts within intellectual property and digital assets.

Agio

Agio

Agio is a hybrid managed IT and cybersecurity provider servicing the financial services, health care and payments industries.

Triaxiom Security

Triaxiom Security

Triaxiom Security offers penetration testing, security audits, and strategic consulting customized to meet your needs.

Scrut Automation

Scrut Automation

Scrut Automation's mission is to make compliance less painful and time consuming, so that businesses can focus on running their business.

Bfore.ai

Bfore.ai

Stop future attacks, today. Bfore.ai is an operational threat intelligence feed to add predictive technology to your security infrastructure.

Concourse Labs

Concourse Labs

Concourse Labs Security Guardrails continuously verify cloud infrastructure and workloads. Continuously assess clouds for security, resiliency, and regulatory compliance.

Trackd

Trackd

At trackd, we’re re-imaging vulnerability remediation for the benefit of the entire cyber security community. Automating Vulnerability Remediation without the Fear of Disruption.

Transatlantic Cyber Security Business Network

Transatlantic Cyber Security Business Network

The Transatlantic Cyber Security Business Network is a coalition of UK and US cyber security companies which facilitates collaboration to help address critical cyber security challenges.

Gleam Cloud Security Solutions (GCSS)

Gleam Cloud Security Solutions (GCSS)

GCSS Security is an information security firm providing cyber security protection with a highly skilled and experienced team focused on technology that creates best-in-class customer experiences.

Beazley Security

Beazley Security

Beazley Security is a global cyber security firm committed to helping clients develop true cyber resilience: the ability to withstand and recover from any cyberattack.