Analytics | CSO Online

Databricks pitches Lakewatch as a cheaper SIEM — but is it really?

The agentic SIEM shifts costs from ingestion to compute, promising cheaper retention and deeper analytics on enterprise security data.

By Anirban Ghoshal

26 Mar 20264 mins

AnalyticsSecurity Information and Event Management SoftwareSecurity Software

Articles

Moving security operations to the cloud

New ESG research finds organizations are aggressively replacing on-premises security analytics and operations technologies with cloud-based alternatives. The shift comes with both short-term wins and strategic benefits.

By Jon Oltsik

13 Jan 2020 3 mins

AnalyticsCloud ComputingSecurity

A common user interface for security operations?

Why it's time to change how security analysts visualize, manipulate, interact with, and act upon security telemetry.

By Jon Oltsik

20 Nov 2019 5 mins

AnalyticsSecurity

4 big changes coming to cybersecurity in 2020 and beyond

The pace of technology and market changes will pick up in 2020, impacting security technologies, innovation, investment, and the industry at large.

By Jon Oltsik

25 Oct 2019 5 mins

AnalyticsCloud SecurityRisk Management

SOAPA vs. SOAR: How these security terms differ

SOAPA and SOAR look the same, but the terms are vastly different. Security orchestration, automation, and response (SOAR) tools represent a component of a security operations and analytics platform architecture (SOAPA).

By Jon Oltsik

13 Sep 2019 4 mins

AnalyticsData and Information SecurityNetwork Security

Security Services Bridge Gaps Caused by Fragmented Network Environments

29 May 2018 6 mins

Big DataNetwork SecuritySecurity

Security analytics: It’s all about the data

More security data drives the need for data modeling, data management, and data discipline.

By Jon Oltsik

31 Jul 2019 5 mins

AnalyticsSecurity

Network traffic analysis tools must include these 6 capabilities

Organizations want advanced analytics, threat intelligence integration, and IoT support among other things in network traffic analysis (NTA) tools.

By Jon Oltsik

18 Jul 2019 3 mins

AnalyticsMalwareNetwork Security

5 threat detection and response technologies are coming together

Organizations use too many disparate point tools to detect and respond to cyber threats in a timely manner. As a result, CISOs want tight integration and interoperability across five cybersecurity technologies.

By Jon Oltsik

1 May 2019 5 mins

Endpoint ProtectionMalwareThreat and Vulnerability Management

OpenC2 can accelerate security operations, automation, and orchestration

OpenC2, a standards effort from OASIS, has the potential to accelerate and automate risk mitigation and incident response. Users and vendors should jump onboard.

By Jon Oltsik

3 Apr 2019 3 mins

AnalyticsRisk ManagementSecurity

What to expect at the RSA Conference 2019

The RSA Conference will feature cloud-scale security analytics, endpoint security suites, API security, advanced security services, and a traffic jam of people.

By Jon Oltsik

27 Feb 2019 4 mins

Cloud SecurityEndpoint ProtectionNetwork Security

Phishing has become the root of most cyber-evil

Phishing has become the top cause of data breaches. But with employee education and the right tools, such breaches can be prevented.

By Zeus Kerravala

5 Feb 2019 6 mins

AnalyticsPhishingSecurity

Big data: too valuable and too challenging to be overlooked

The positive potential of big data is enormous, spanning virtually all industries and impacting both the public and private sectors. However, we must also be mindful of safeguarding big data as much as collecting and utilizing it.

By Chris Dimitriadis

8 Jan 2019 4 mins

Big DataData and Information SecurityTechnology Industry