Get to know us better! Gain valuable insights into how we think by visiting our blog, or take a look at the industry events we're frequenting on our events page. You can also geek out with us by attending one of our security management webinars, or dive head first into the products and solutions we provide in our Resource Library. There's lots to keep you busy!
In Part 1, we built the case that SIEMs are ineffective for threat hunting, based on the following reasons:
To date, SIEM vendors have not provided the market with the functions needed for producing world-class threat hunting. Again, threat hunting is a method. In order to follow this method, we have to have tools that accelerate and amplify our human work, rather than using technologies that brush aside our method in favor of operating within their paradigm. Too many threat hunting programs are sputtering because we continue to believe that the method should conform to the technology, but that gets things backwards.
Threat hunting remains an undeveloped competency for far too many organizations. When surveyed, security professionals confess an overall lack of competency to detect and respond to advanced attacks that slip through their defenses. In my experience, many organizations still rely on alerts from a SIEM (among other prevention systems). Most security teams will painstakingly build models for indicators of compromise, receive alerts from their SIEM, and “do the best they can” to eliminate the intrusion. What are the results?
How do you know if your security posture is where it needs to be? Most organizations look at standards, be it national standards, industry standards or their own corporate standards. They may also look at their industry’s best practices. But if you aren’t looking at your risk vulnerability, you are likely not looking at the entire spectrum of your network’s security posture.
El nuevo paradigma de la automatización es la “Administración del Ciclo de Vida”
Te mostraremos cómo FireMon Intelligent Policy Automation utiliza la tecnología de automatización e inteligencia para reducir el esfuerzo e incrementar la eficacia en cada etapa del proceso de cambios.
OVERLAND PARK, KANSAS & DALLAS, TEXAS – March 14, 2017 – FireMon, the leader in Intelligent Security Management, today announced results from a survey conducted at the recent RSA Conference that gauged the attitudes of 350 IT security professionals towards the skills shortage in cybersecurity. It found that a remarkably high 93% of respondents place more importance on experience rather than qualifications when it comes to hiring. A further 73% claimed that it didn’t matter whether IT staff were college graduates when it came to getting the job done.
Main survey findings:
“Combatting the skills gap does not lie solely with more people getting degrees and certifications,” said Jeremy Martin, Vice President of Engineering, FireMon. “Experience has been shown to be much more important, which could is good news for security-minded folks who learn by experimenting with code and tearing apart systems. That is not to diminish those with qualifications, but instead to encourage those with real-world experience to apply for the IT security jobs they think they might not otherwise get.”
It was also good news for those IT professionals who have good communication skills, but perhaps not the best technical skills, as respondents were split down the middle as to what was more important. Another 90% of IT security professionals surveyed agreed that in order to keep up with the rapidly changing threat landscape, IT security professionals would have to become more business savvy.
“Good communication skills can’t be overlooked,” continued Martin. “We need people with those skills to become facilitators to the business. The key to the skills gap will be identifying these opportunities and matching them with individuals who can relay the IT security messages to the rest of the company or senior management in ways that makes sense in business terms.”
A final key finding was that a third of respondents said they could use more intelligent IT security products. With more intuitive technology, staffing resources could be freed up from mundane tasks to focus their knowledge where it really counts.
“With all of the complexity surrounding IT security infrastructure, from the various security technologies, routers, switches, firewalls and so forth, finding ways to make management tools and workflows more intelligent can shoulder some of the burden and fill in interim staffing gaps,” concluded Martin.
Using the FireMon Intelligent Security Management platform, today’s leading enterprise organizations, government agencies, and managed security providers have dramatically improved effectiveness of network defenses, accelerating business agility optimizing return on investment. For more information or a free 30-day trial, visit www.firemon.com.
Helping Enterprise Security Teams Improve Resource Efficiency & Reduce Overall Risk Exposure
Firewall technology has come a long way since its initial, most rudimentary forms. Next-Generation Firewalls (NGFW) are the latest development, and organizations are accelerating adoption to the new technology. But NGFWs aren’t a fix-all solution.