Cybersecurity  is the art and science of protecting computer systems and networks from the theft of electronic data, damage to hardware or software, or disruption of the services they provide. The world now relies heavily on computers and networks to facilitate movement of a vast range of goods and services, and  Cybersecurity  has become more and more important. Cyber criminals have developed many different forms of attacks, and they are becoming increasingly complex in the face of efforts to defeat them. Examples include: Denial-of-service attacks Eavesdropping Multi-vector attacks Phishing Spoofing Ransomware Direct-access attacks Backdoors Privilege escalation Keyloggers Viruses and Trojans Over time, the industry has developed many different types of weapons to combat  cyberattacks , from anti-virus programs to firewalls to endpoint security,  SIEM  and others. But to be effective, a  Cybersecurity  system should be able t...

  How to connect all the dots in a complex threat landscape Developers are showing more interest in using Machine Learning (ML) to automate threat-hunting. As the volume of  cyberattacks  grows,  security analysts  have become overwhelmed. To address this issue, developers are showing more interest in using  Machine Learning  (ML) to  automate  threat-hunting . In fact, researchers have tried to implement ML in  cybersecurity solutions  since the late 1980s, but progress has been slow. Today, ML is showing increasing promise with the advent of Big Data because the quality of information from which ML can learn is improving. However, there is much more to be done. Anomaly Detection – The Early Days When we talk about  security , we want a system that can separate good from bad, normal from abnormal. Therefore, it is quite natural to apply anomaly detection to security. We can trace the beginning of anomaly detection back to 1987...

  The historical definition of  network security  is to use a firewall to screen users coming into the network, but as  IT technology  and  security technology  have evolved, the definition is much broader now. Today,  network security  is everything a company does to ensure the security of its networks  and everything connected to them . This includes the network, the cloud (or clouds), endpoints, servers, users and applications.  Cybersecurity  products seek use preventive physical and software measures to protect the network and its assets from unauthorized access, modification, destruction and misuse. These products typically target certain assets on the network: Firewalls  prevent unauthorized users from accessing the network by allowing or denying traffic. Anti-Virus/Malware software  protects network endpoints and servers from becoming infected by damaging software that can corrupt files, export sensitive data,...

  Recently I wrote on  Open XDR  and the problems it helps solve. In case you didn’t read it, the topic was data fatigue. With more than 1500 security vendors with thousands of point products solving point solutions – understaffed and under-skilled security teams are at a huge disadvantage. Add to that the issue that those point solutions don’t share data or play well together, in addition to a shortage of security practitioners to manage those solutions, and the problem continues. Imagine a  security operations center (SOC)  with multiple screens supporting multiple products – those analysts are constantly swiveling between screens because those point products don’t play well together or share data. In a previous role, I worked for a company that had a very ambitious goal: one pane of glass to manage all the  security products  in their portfolio. As a security leader, I thought this approach was brilliant! Imagine a world where your security teams on...

  Stellar Cyber , the only cohesive security AI/ML platform that delivers maximum protection, today announced that REVEZ Corporation Ltd., a major technology Company based in Singapore, has selected the Stellar Cyber platform to provide comprehensive  cybersecurity  for its customers to increase productivity while enabling lower traditional operational costs. Stellar Cyber makes the world’s first and only  Open eXtended Detection and Response (XDR) platform , a new Security Operations Center (SOC) concept that ensures security throughout the kill chain while accepting inputs from other existing  cybersecurity solutions , and slashes operations costs by the adoption of artificial intelligence and machine learning engines and boosting analyst performance with an easy-to-use security dashboard. “The breadth of Stellar Cyber’s offering, including UEBA, NTA, NG-SIEM and automated response, and their ability to integrate with any endpoint detection and response (EDR) ...

There’s a relatively new acronym out there in the security space: it’s  XDR( Extended Detection and Response ) . But why do we need yet another acronym and should you care? Over the last several years, many analyst groups have tried to capture the idea of more complex attacks and how to build best practices to put the right  security infrastructure  in place to help. The past has delivered successive sets of tools that do solve unique problems. The rise of Endpoint Detection and Response ( EDR ) — endpoints are in many cases the first line of defense or first line of breakdown. The rise of  Network Traffic Analysis  (NTA / NDR) besides NGFW– packets have a wealth of insight imbedded in both their header and content The rise of Cloud Application Security Brokers (CASB) — a new way to protect SaaS applications like Office365, which can not be protected with traditional firewalls. The  SIEM  — the backbone of security operations teams; logs have a lot of ...