Security Analytics Key in Breach Detection- Gartner

Analysts to discuss emerging security trends and technologies at upcoming Gartner security and risk management summits

Although security spending is at an all-time high, security breaches at major organizations are also at an all-time high, according to Gartner.

“Security analytics platforms endeavor to bring situational awareness to security events by gathering and analyzing a broader set of data, such that the events that pose the greatest harm to an organization are found and prioritized with greater accuracy,” said Eric Ahlm, research director at Gartner.

When it comes to gathering masses of security data that can be analyzed to bring greater meaning to security events, security information and event management (SIEM) technologies are topping the list of likely solutions. While most SIEM products have the ability to collect, store and analyze security data, the meaning that can be pulled from a data store (such as the security data found in a SIEM) depends on how the data is reviewed. How well a SIEM product can perform automated analytics — compared with user queries and rules — has become an area of differentiation among SIEM providers.

User behavior analytics (UBA) is another example of security analytics that is already gaining buyer attention.

“However, the applications or other problems that can be addressed for other security markets are still emerging and on the whole, the security industry is rather immature in the application of analytics.” said Mr. Ahlm.

Leave a Reply