SOAR, or Security Orchestration, Automation and Response, helps customers ensure the sanctity of their infrastructure, data and end-users, according to Sanjay Ramnath, vice president, product marketing, of AT&T Cybersecurity. Integrating analytics, automation and threat intelligence helps customers eliminate the seams where the bad guys get in.

from Dark Reading: https://ift.tt/2TuadIU
via IFTTT

Data loss protection helps companies get more proactive than data loss prevention and will help customers in an era of Big Data, says Vijay Ramanathan of Code 42. Data loss protection helps with both time to awareness and time to response; its reliance on automation also means greater volumes of data can be managed.

from Dark Reading: https://ift.tt/2JaY47V
via IFTTT

Vulnerability rates in application software remain as high as they were 15 years ago, according to Jeff Williams, CTO of Contrast Security. But by injecting intelligent agents into code, app software gets instruments with thousands of smart, agile sensors that detect and correct vulnerabilities before deployment, and protect apps in operation.

from Dark Reading: https://ift.tt/2SNBaTe
via IFTTT

Deep learning, as a subset of machine learning (which is itself a subset of artificial intelligence), can help transform a company’s security posture, says Deep Instinct’s Guy Caspi. Deep learning’s predictive capabilities also change the security management equation reactive to proactive, an important breakthrough in forecasting and risk management.

from Dark Reading: https://ift.tt/2C5QUvy
via IFTTT

Not all security data that’s publicly shared gets analyzed or vetted, but Forrester’s recent independent analysis of MITRE ATT&CK evaluation offers up useful insights to infosec pros and can guide their procurement and security strategy, according to Mike Nichols of Endgame. These reports can help with intelligent evaluation of detection and response versus prevention approaches.

from Dark Reading: https://ift.tt/2XJn618
via IFTTT

With a record number of cyber-attacks recorded in 2018 and even more expected this year, integrating multiple security sub-systems is essential for enterprises, says Anomali’s Hugh Njemanze. He also encourages companies to operationalize their threat intelligence and to get better at sharing threat intel data.

from Dark Reading: https://ift.tt/2C7rttF
via IFTTT

With digital transformation in full swing and Big Data accumulating, end-user organizations have their hands full to manage, store and protect all their data, according to Todd Moore of Gemalto. While end-users have access to cloud-based encryption and other security services, Moore warns that the bad guys have access to them too.

from Dark Reading: https://ift.tt/2UkOUXb
via IFTTT

Application security is always important to infosec professionals, and as Ravi Iyer of Synopsys points out, software development trends like Agile, DevOps and CI/CD push app security to the forefront. Polaris, the new software integrity platform from Synopsys, can help with early detection of software vulnerabilities.

from Dark Reading: https://ift.tt/2C8Ks74
via IFTTT

Risk management and compliance technologies emerge from the intersection of technology, security, and regulation; continuous security management helps professionals from multiple departments and disciplines access the info they need, when they need it, according to Sam Abadir of Lockpath.

from Dark Reading: https://ift.tt/2NLc7zy
via IFTTT