BYOD/Big Data
Big Data Overwhelms Security Teams
Reported by esecurityplanet.com
Experts say increased automation and better analytics will help security teams overwhelmed by Big Data.
A major contributing factor in many recent data breaches has been the fact that many IT security teams are simply overwhelmed by the volume of data they’re handling. During last fall’s massive Target breach , for example, the company’s intrusion detection software triggered several alerts, but Target’s security team wasn’t able to respond to them.
“Target’s security team neither reacted to the alarms nor allowed the FireEye software to automatically delete the malware in question,” the U.S. Senate Committee on Commerce, Science and Transportation noted in a March 2014 report [PDF] on the breach.
Jon Oltsik, senior principal analyst at research firm ESG , said Target’s experience is consistent with what he’s been seeing in the market, noting that “companies have invested in advanced malware detection but don’t know what to prioritize or what actions to take when they receive an alert.”
According to the results of an ESG survey of 257 enterprise security professionals, 35 percent of respondents said they’re challenged by too many false positive alerts and 39 percent are challenged by lack of adequate staffing. Almost one third of organizations said they’re challenged by the fact that incident detection involves too many manual processes.
