PRO+ Premium Content/Information Security
Access your Pro+ Content below.
2 components of detection and threat intelligence platforms
This article is part of the Information Security issue of February 2020, Vol. 21, No. 1
Several years ago, my company, Nemertes, flagged threat detection and threat intelligence platforms as one of the bellwether technologies that correlate with highly successful cybersecurity organizations, as measured by mean total time to contain. But the success correlation is a bit lower than anticipated, given how obvious the benefit of using such tools should be. It turns out there's a wide range of offerings when it comes to such products. Just because a vendor or service provider bills its offerings as "threat detection and intelligence" doesn't mean those offerings are delivering what cybersecurity professionals actually need. So the data got muddied by folks who said they were using "threat intelligence," but in fact were using little more than traditional list-based antimalware. So what's a threat intelligence platform, anyway? OK, what do we mean by threat detection and intelligence? And how can you be sure you're "doing it right" -- procuring the products and services that deliver actual value? First, be aware that ...
Features in this issue
-
Threat intelligence offers promise, but limitations remain
Do you know how to use threat intelligence feeds to best effect in your company? Learn what this valuable yet often confusing resource can and can't do for cybersecurity.
-
Data breach costs hit hard; where are you most vulnerable?
Breaking down the cost of a data breach isn't for the faint of heart. But with millions of dollars on the line for a single event, companies also need to have their eyes wide open.
News in this issue
-
Fresh thinking on cybersecurity threats for 2020
It's a good time to take a clear-eyed view of the likely security threats facing your organization. But then what? Experts suggest getting creative with your threat responses.
Columns in this issue
-
Cisco CISO says today's enterprise must take chances
Cisco CISO Steve Martino talks about taking chances, threats, how the security leader's role is changing and what really works when it comes to keeping the company secure.
-
2 components of detection and threat intelligence platforms
Deploying threat detection and intelligence platforms is one of the smartest ways to protect your organization's valuable assets. Make sure you know how to choose the best tool.