Eskenzi PR ad banner Eskenzi PR ad banner
  • About Us
Saturday, 9 December, 2023
IT Security Guru
Eskenzi PR banner
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
IT Security Guru
No Result
View All Result

Data Breaches – What can we be doing better?

by The Gurus
June 23, 2015
in This Week's Gurus
Share on FacebookShare on Twitter

With more breaches sensationalized in the news each week, the question, “what can we be doing better?” is sure to come up. I’ve been glad to see more being written about user behaviour analytics (or UBA) over the past few months.
To quote industry analyst Rob Enderle in an article on CIO.com, “I recently attended an event where I was surprised to learn that of a number of companies that had deployed a UBA solution, 75 percent indicated they had caught a breach in progress with it. Makes you wonder how many breaches aren’t being caught in firms that haven’t deployed this technology… UBA builds a profile of each employee and if it sees an employee acting strangely it sends out an alert.”
I wonder along with Rob about the number of breaches that aren’t being caught, and they’re probably occurring far more frequently than any of us want to believe. I also agree that user behaviour analysis is definitely another valuable piece of the security puzzle – in fact, it’s one of the only things that can help detect rogue insiders, or outsiders that have compromised the credentials or systems of insiders.
However – and though it may seem obvious – in order to do user behaviour analysis, you have to track enough behaviour to have something meaningful to analyse. Unfortunately, very little is actually recorded about what employees do with corporate data, much less analysed.
From a Ponemon Institute survey sponsored by Varonis, only 22% of employees say their organization can tell them what happened to lost data, files, or emails. It’s not just files and emails missing that they don’t know about – they don’t know who is opening them, sending them, creating them, or changing them, or when or which devices they’re using.
Doing user behaviour analytics without looking at how and when employees access data is like credit card companies trying to do fraud protection without looking at credit card transactions. It’s absurd. If you want to protect data, you have to watch how it’s used normally every day, baseline normal behaviour for each user, and then try to spot the abnormal.
That’s not to say you can’t do a lot of good by tracking VPN login times, IP addresses, bandwidth consumption, etc. – the more data points you have, the more complete your baseline. Just don’t forget the essential ingredients: who is actually using all that valuable data and what they’re doing with it.
David Gibson is VP at Varonis.
https://www.linkedin.com/in/davidsgibson646
@dsgibson

FacebookTweetLinkedIn
Tags: behavioural analysisdata breachDavid GibsonUBAVaronis
ShareTweet
Previous Post

OPSWAT is Issued Patent – 'Determination of Whether a Data Storage is Encrypted'

Next Post

Facebook (FB) Offers New Malware Cleanup Tools

Recent News

New Synopsys Report Reveals Application Security Automation Soars

December 5, 2023
Over 80% of IT Leaders Want to Move Their On-Prem PAM Solution to the Cloud

Over 80% of IT Leaders Want to Move Their On-Prem PAM Solution to the Cloud

December 5, 2023
Centripetal real logo

Centripetal Announces Partnership With Tiger to Provide Cybersecurity Innovation to the UK Market

December 7, 2023
Google bins inactive accounts

Google bins inactive accounts

December 1, 2023

The IT Security Guru offers a daily news digest of all the best breaking IT security news stories first thing in the morning! Rather than you having to trawl through all the news feeds to find out what’s cooking, you can quickly get everything you need from this site!

Our Address: 10 London Mews, London, W2 1HY

Follow Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

This site uses functional cookies and external scripts to improve your experience.

Privacy settings

Privacy Settings / PENDING

This site uses functional cookies and external scripts to improve your experience. Which cookies and scripts are used and how they impact your visit is specified on the left. You may change your settings at any time. Your choices will not impact your visit.

NOTE: These settings will only apply to the browser and device you are currently using.

GDPR Compliance

Powered by Cookie Information