Security News
In his paper, Prevention is Futile in 2020: Protect information Via Pervasive Monitoring and Collective Intelligence, he projected that by 2020, 60% of enterprise information security budgets will be allocated for rapid detection and response approaches, up from less than 10% in 2013. In subsequent years, the definition shifted towards detection and response with vulnerability management remaining part of security operations, but not a core focus of the SOC. In 2017, Gartner began describing SOAR as the convergence of SOA, SIR and threat intelligence.
Stellar Cyber announced that Deeptree has selected the Stellar Cyber platform as the basis of its intelligent next generation SOC. Through this partnership, Deeptree can bring tailored, enterprise-class cybersecurity services to customers of all sizes. The Stellar Cyber platform goes beyond other SOC solutions in that it tightly integrates native capabilities, such as network detection response, cloud detection response and SIEM, while also analyzing data from existing third-party solutions to provide the most comprehensive security protection throughout the kill chain.
Cadence Design Systems announced Cadence System-Level Verification IP, a new suite of tools and libraries for automating system-on-chip testbench assembly, bus and CPU traffic generation, cache-coherency validation and system performance bottleneck analysis. Using Cadence System VIP, customers creating complex hyperscale, automotive, mobile and consumer chips can improve chip-level verification efficiency by up to 10X. The new Cadence System VIP solution takes Cadence's market leadership in IP-level verification automation and brings it to the chip level.
Dell's Chief Security Officer John Scimone runs a converged security organization, which creates an unusually broad view of security risks. The security team at Dell also holds regular joint strategy and operational planning meetings that include physical and digital security professionals, resilience professionals and business unit security leaders.
At the RSA Cybersecurity Summit 2020 on Tuesday, security experts explained how to rethink the security operations center when analysts are working from home instead of side by side. Two RSA leaders shared advice on how to do this during a conversation about how the shift to 100% remote work has affected security teams who have the same challenges all other remote workers have.
Being able to deliver these secure integrated managed services in the Netherlands is a first for Thales. From now on, Thales will be able to offer this service for and from the Netherlands.
On the one hand, 72% of firms consider the SOC a key part of their security strategy; but on the other hand, 60% of SOC staff have considered changing careers because of stress, while 65% claim to have limited visibility into the attack surface. A survey of 600 professionals working in IT and security, conducted by Ponemon and commissioned by Devo, seeks to better understand the causes behind the effective and ineffective areas of SOCs.
SOC team members battle with burnout, overload and chaosWhile some organizations have increased security operations center funding, the overall gains have been meager, and the most significant issues have not only persisted, but worsened, according to Devo Technology. Privacy and security concerns related to patient data in the cloudThe Cloud Security Alliance has released a report examining privacy and security of patient data in the cloud.
The report, based on a survey conducted by Ponemon Institute, examines many of the same issues as last year, and found 60% of SOC team members are still considering changing careers or leaving their jobs due to burnout. The survey, conducted in March and April 2020, queried IT and IT security practitioners in organizations that have a SOC. On the positive side, the importance of investing in a SOC remains high, with 72% of respondents categorizing the SOC as "Essential" or "Very important" to their organization's overall cybersecurity strategy, up 5% year-over-year.
Siemens has signed an agreement to acquire Cambridge, UK-based UltraSoC Technologies, a provider of instrumentation and analytics solutions that put intelligent monitoring, cybersecurity and functional safety capabilities into the core hardware of system-on-chip. The addition of UltraSoC to Siemens enables a unified data-driven infrastructure that can enhance product quality, safety and cybersecurity, and the creation of a comprehensive solution to help semiconductor industry customers overcome key pain points including manufacturing defects, software and hardware bugs, device early-failure and wear-out, functional safety, and malicious attacks.