Big security data claims businesses unable to use power to ward off threats: McAfee Study

Mumbai, June 18 (ANI-Business Wire India): McAfee today released a study revealing how organizations around the world are unable to harness the power of big data for security purposes.

According to the report titled 'Needle in a Datastack', businesses are vulnerable to security breaches due to their inability to properly analyze or store big data.

The ability to detect data breaches within minutes is critical in preventing data loss, yet only 35 percent of firms stated that they have the ability to do this. In fact, more than a fifth (22 percent) said they would need a day to identify a breach, and five percent said this process would take up to a week. On average, organizations reported that it takes 10 hours for a security breach to be recognized.

"If you're in a fight, you need to know that while it's happening, not after the fact," said Mike Fey, executive vice president and worldwide Chief Technology Officer. "This study has shown what we've long suspected-that far too few organizations have real-time access to the simple question 'am I being breached?' Only by knowing this, can you stop it from happening."

Nearly three quarters (73 percent) of respondents claimed they can assess their security status in real-time and they also responded with confidence in their ability to identify in real-time insider threat detection (74 percent), perimeter threats (78 percent), zero day malware (72 percent) and compliance controls (80 percent).

However, of the 58 percent of organizations that said they had suffered a security breach in the last year, just a quarter (24 percent) had recognised it within minutes. In addition, when it came to actually finding the source of the breach, only 14 percent could do so in minutes, while 33 percent said it took a day and 16 percent said a week.

This false confidence highlights a disconnect between the IT department and security professionals within organizations, which is further highlighted when the Needle in a Datastack findings are compared with the with a recent Data Breach Investigations report of security incidents. The study of 855 incidents showed that 63 percent took weeks or months to be discovered. The data was taken from these organizations within seconds or minutes in almost half (46 percent) of the cases.

Needle in a Datastack found that on average that organizations are storing approximately 11-15 terabytes of security data a week, a figure that Gartner Group predicts will double annually through 2016. To put that in perspective, 10 terabytes is the equivalent of the printed collection of the Library of Congress. Despite storing such large volumes of data, 58 percent of firms admitted to only holding on to it for less than three months, thereby negating many of the advantages of storing it in the first place.

According to the McAfee Threats Report: Fourth Quarter 2012, the appearance of new advanced persistent threats (APTs) accelerated in the second half of 2012. This type of threat can lay dormant within a network for months or even years, with numerous recent high profile examples including attacks on major U.S. newspapers. Long term retention and analysis of security data to reveal patterns, trends and correlations is crucial if organizations are to spot and deal quickly with these APTs.

To achieve real-time threat intelligence in an age where the volume, velocity and variety of information have pushed legacy systems to their limit, businesses must embrace the analysis, storage and management of big security data. These ever-growing volumes of events, as well as asset, threat, user and other relevant data have created a big data challenge for security teams. To overcome this challenge, successful organizations have moved from traditional data management architectures to systems that are purpose-built to handle security data management in the age of APTs.

With this need to identify complex attacks, organizations should go beyond pattern matching to achieve true risk-based analysis and modelling. Ideally, this approach should be backed by a data management system able to create complex real-time analytics. In addition to the ability to spot threats in real-time, organizations should have the ability to identify potentially sinister long-term trends and patterns. Beyond just finding a 'needle in a datastack', organizations should move to a longer time horizon with risk-based context to find the right needle, so they can proactively deal with today's threats.

The study, conducted by research firm Vanson Bourne, interviewed 500 senior IT decision makers in January 2013, including 200 in the USA and 100 each in the UK, Germany and Australia. (ANI-Businesswire India)

Matches

MORE TOP STORIES TODAY

Time for Chennai to enter familiar cocoon

Time for Chennai to enter familiar cocoon

Chennai have an emphatic 8-3 lead in the head-to-head with Punjab, with one game tied More »

Evenly matched Rajasthan and Hyderabad face-off

Evenly matched Rajasthan and Hyderabad face-off

A quality that defines Rajasthan and Hyderabad is consistency. Rajasthan was one among two teams to enjoy complete dominance at home last season. Hyderabad… More »

Beleaguered Yuvraj tees off to Sharjah's delight

Beleaguered Yuvraj tees off to Sharjah's delight

Yuvraj Singh was hardly convincing to begin with against Delhi, but a big dose of crowd support and a helping of poor bowling meant he had the opportunity… More »

Fiery star Stokes bids to curb his temper

Fiery star Stokes bids to curb his temper

England all-rounder Ben Stokes admits he must keep his anger under control if he is to end his international exile. More »

Troubled Trott to take another break

Troubled Trott to take another break

Jonathan pulled out of England's tour to Australia Brisbane with a 'stress-related illness'. More »

Bangalore's arsenal blazes to victory

Bangalore's arsenal blazes to victory

Yuvraj Singh was back to his best in his first match for Royal Challengers Bangalore. More »

BCCI to meet before next court hearing

BCCI to meet before next court hearing

The BCCI will hold an emergent working committee meeting on April 20 to discuss the future course of action with regard to the Supreme Court hearing concerning… More »

Gavaskar wants a clean IPL

Gavaskar wants a clean IPL

"Integrity is non-negotiable..." says the BCCI's interim chief ahead of Season 7 of the tainted league. More »

Kallis, Narine star in KKR win

Kallis, Narine star in KKR win

An all-round display saw Knight Riders thump Mumbai Indians by 41 runs in the IPL-7 opener. More »

Srinivasan named in fixing report: SC

Srinivasan named in fixing report: SC

The court emphasised that the tainted administrator can no longer work for the BCCI. More »

Yuvraj happy to play for RCB: Kohli

Yuvraj happy to play for RCB: Kohli

New-look RCB will play their first game of IPL-7 on Thursday. More »

'Yak' Kallis still on top of his game

'Yak' Kallis still on top of his game

The 38-year-old South African veteran turned it on for Kolkata Knight RIders in the opening match of IPL-7. More »

IPL: News Line

IPL: News Line

A round-up of all the news from this season of the IPL. More »

Shane Watson issues moral warning

Shane Watson issues moral warning

'Everyone knows what is right and what is wrong and if you do the wrong thing it will be found out' More »

Why I'm not looking forward to the IPL

Why I'm not looking forward to the IPL

Welcome to another season of a league that many watch but few trust. More »

Johnson may quit T20s for Tests

Johnson may quit T20s for Tests

Australia's Mitchell Johnson may quit limited-overs cricket to prolong his test career with an eye on the 2015 Ashes series in England, the fast bowler… More »

Nepal players call off boycott

Nepal players call off boycott

Thaw in relations after formation of an advisory committee that would work in tandem with the Cricket Association of Nepal. More »

There's a lot going on: Fleming

There's a lot going on: Fleming

He experienced anxious moments in the lead-up to the tournament as the courts decided on whether to suspend the franchise, he said, but stressed that the… More »

Latif couldn’t work with tainted players

Latif couldn’t work with tainted players

Former Pakistan cricket captain Rashid Latif said Tuesday he turned down the job of national chief selector because he could not work with ex-players tainted… More »

We are not over-confident: Bailey

We are not over-confident: Bailey

Indian Premier League — George Bailey-led Kings XI Punjab will face Chennai Super Kings on Friday. More »

Big runs expected, with bat and ball

Big runs expected, with bat and ball

Royal Challengers Bangalore: Their main concern, once again, is the fast bowling More »

Taxing issue — BCCI hits roadblock

Taxing issue — BCCI hits roadblock

MoU between BCCI & its units to avoid double taxation delayed after a few decline to share details. More »

Black Caps pick rookie duo for West Indies

Black Caps pick rookie duo for West Indies

New Zealand selectors included two new caps in a 15-man Test squad named Tuesday to tour the West Indies, with injury-hit spinner Dan Vettori's future… More »

The stage is set for IPL-7 to start

The stage is set for IPL-7 to start

The Preview — Defending champions Mumbai Indians take on Kolkata Knight Riders More »