Collaborate Disseminate
One of the famous insults that security vendors use against competitors nowadays is “RULE – BASED.” In essence, if you want to insult your peers who, in your estimation, don’t spout “AI” and “ML” often en… Continue reading Rule Based Detection?
Following on the cloud theme from “Psychoanalyzing Security Cloud Fears”, here is another one: does fake cloud matter? First, what is FAKE CLOUD? The classic and most crisp fake cloud example (that used to be called “cloudwashing̶… Continue reading Does Fake Cloud Matter?
You guys recall my security chasm post from 2014? Because clearly some of you obsessively reread what I wrote 5 years ago … not 🙂 That post basically built on an idea of security “haves” and “have-nots” that some o… Continue reading The Other Security Chasm
Gartner Security & Risk Management Summit 2019 is coming soon and here is my traditional blog post summarizing my speaking at this upcoming event (Washington, DC, June 17-20, 2019). “Outlook of Security Operations” – “Modern… Continue reading Speaking at Gartner Security Summit 2019
After many discussions and a bit of a re-write, our new paper “Applying Network-Centric Approaches for Threat Detection and Response” is finally ready (Gartner GTP access required). The abstract states “The escalating sophistication o… Continue reading Our “Applying Network-Centric Approaches for Threat Detection and Response” Paper Publishes
One of the new ideas we had for a 2019 research paper is something clients often (well, often–ish) ask about: what to do if you encounter a particular threat or a type of an incident? A sort of a playbook for confirmation, investigation and respo… Continue reading Canned Playbooks: Are They Realistic?
My RSA Conference (#RSAC) this year was only a one day affair due to a new baby at home, but I cannot skip my ”duty” of writing this blog post with conference observations and impressions. Here they are: My first observation from the HUGE ~… Continue reading RSA 2019: Happily Not Over-AI’d
As Gartner GTP client inquiry volumes grow, our team needs to expand again. We now have a new position open (an expansion hire). This role is super exciting since this is an expansion hire for the same topics that Augusto Barros, Anna Belak and me cove… Continue reading Our Team Is Hiring: New Position Open – North America
This post is inspired by an idea (and a visual) from my esteemed colleague Toby Bussa. It reflects our view that while you have TWO major routes to security orchestration, automation and response (SOAR) success, only one of them is in fact “right… Continue reading Two Doors to SOAR Visual
Dear readers, please treat this post as a form of analyst psychotherapy! As we are entering our 4th month of deception research (with one deception paper out already and one more under development), this question is the proboscidean in the room. Frankl… Continue reading Will Deception Fizzle … Again?