Brad Medairy, Booz Allen Hamilton, sits with Dave Vellante and John Walls at Splunk .conf 2017 in Washington, D.C
#splunkconf17 #theCUBE
https://siliconangle.com/2017/11/27/best-defense-good-offense-case-new-data-security-platforms-splunkconf17/
The best defense is a good offense: The case for new data security platforms
Damaging news reports of data breaches at familiar companies like Uber Technologies Inc. and Equifax Inc. are scaring enterprises straight. The anxiety is good for business in the cybersecurity technology sector. The big data security software market is expected to swell from 2016’s $10.63 Billion to $26.85 Billion by 2022. But it’s not like the goats in the headlines weren’t using cyber defense tech. Are the new products any better? How can information technology and security teams convince C-level executives their investments will be worth it?
“The problem is, at the end of the day, the adversaries live in the seams,” says Brad Medairy (pictured), senior vice president at Booz Allen Hamilton Inc. Vendors may hone individual security tools to be very good at a given, well-defined task, he said. But any missed spots are exploitable by attackers who can slip into the thinnest cracks.
Nevertheless, cleverly-marketed security software finds plenty of takers in well-meaning security pros. At industry powwows like the RSA security conference, “I watch a lot of folks in the space walking around with a shopping cart. And they meet all these great vendors, and they have all these shiny pebbles,” Medairy said. Chief security officers walk away thinking they’ve procured the silver bullet, at last; that if they implement this tool or technology, they’re good to go, he said. “And I think we all know that’s not the case.”
Mediary related his lessons on what effective security looks like in an interview at Splunk .conf2017 in Washington, D.C. His years fighting terrorism led to his faith in the data-centric approach. Fighting adversaries at the data level, instead of within parameters set by specific tools, is a more advanced approach, he said. “All these tools work really well — within their own ecosystem,” he told John Walls (@JohnWalls21) and Dave Vellante (@dvellante), co-hosts of theCUBE, SiliconANGLE Media’s mobile livestreaming studio. “But as soon as you start to mix and match best-of-breed tools and capabilities, they tend to not play well together.” (* Disclosure below.)
Forgot Password
Almost there!
We just sent you a verification email. Please verify your account to gain access to
Splunk.conf 2017. If you don’t think you received an email check your
spam folder.
In order to sign in, enter the email address you used to registered for the event. Once completed, you will receive an email with a verification link. Open this link to automatically sign into the site.
Register For Splunk.conf 2017
Please fill out the information below. You will recieve an email with a verification link confirming your registration. Click the link to automatically sign into the site.
You’re almost there!
We just sent you a verification email. Please click the verification button in the email. Once your email address is verified, you will have full access to all event content for Splunk.conf 2017.
I want my badge and interests to be visible to all attendees.
Checking this box will display your presense on the attendees list, view your profile and allow other attendees to contact you via 1-1 chat. Read the Privacy Policy. At any time, you can choose to disable this preference.
Select your Interests!
add
Upload your photo
Uploading..
OR
Connect via Twitter
Connect via Linkedin
EDIT PASSWORD
Share
Forgot Password
Almost there!
We just sent you a verification email. Please verify your account to gain access to
Splunk.conf 2017. If you don’t think you received an email check your
spam folder.
In order to sign in, enter the email address you used to registered for the event. Once completed, you will receive an email with a verification link. Open this link to automatically sign into the site.
Sign in to gain access to Splunk.conf 2017
Please sign in with LinkedIn to continue to Splunk.conf 2017. Signing in with LinkedIn ensures a professional environment.
Are you sure you want to remove access rights for this user?
Details
Manage Access
email address
Community Invitation
Brad Medairy, Booz Allen Hamilton | Splunk .conf 2017
Brad Medairy, Booz Allen Hamilton, sits with Dave Vellante and John Walls at Splunk .conf 2017 in Washington, D.C
#splunkconf17 #theCUBE
https://siliconangle.com/2017/11/27/best-defense-good-offense-case-new-data-security-platforms-splunkconf17/
The best defense is a good offense: The case for new data security platforms
Damaging news reports of data breaches at familiar companies like Uber Technologies Inc. and Equifax Inc. are scaring enterprises straight. The anxiety is good for business in the cybersecurity technology sector. The big data security software market is expected to swell from 2016’s $10.63 Billion to $26.85 Billion by 2022. But it’s not like the goats in the headlines weren’t using cyber defense tech. Are the new products any better? How can information technology and security teams convince C-level executives their investments will be worth it?
“The problem is, at the end of the day, the adversaries live in the seams,” says Brad Medairy (pictured), senior vice president at Booz Allen Hamilton Inc. Vendors may hone individual security tools to be very good at a given, well-defined task, he said. But any missed spots are exploitable by attackers who can slip into the thinnest cracks.
Nevertheless, cleverly-marketed security software finds plenty of takers in well-meaning security pros. At industry powwows like the RSA security conference, “I watch a lot of folks in the space walking around with a shopping cart. And they meet all these great vendors, and they have all these shiny pebbles,” Medairy said. Chief security officers walk away thinking they’ve procured the silver bullet, at last; that if they implement this tool or technology, they’re good to go, he said. “And I think we all know that’s not the case.”
Mediary related his lessons on what effective security looks like in an interview at Splunk .conf2017 in Washington, D.C. His years fighting terrorism led to his faith in the data-centric approach. Fighting adversaries at the data level, instead of within parameters set by specific tools, is a more advanced approach, he said. “All these tools work really well — within their own ecosystem,” he told John Walls (@JohnWalls21) and Dave Vellante (@dvellante), co-hosts of theCUBE, SiliconANGLE Media’s mobile livestreaming studio. “But as soon as you start to mix and match best-of-breed tools and capabilities, they tend to not play well together.” (* Disclosure below.)