Analytics
Security Analytics
Security Analytics combines data from various sources and looks for patterns or anomalies in that data that could give hints of potential attacks. There are many elements to an analytics solution, but the main ones are:
Behavioral Analytics – Studying the patterns of behavior of an end user or their software for anything out of the ordinary. A major example of this would be in the financial industry if there is a random charge on a credit card in the middle of the night when the user rarely uses their card at that time or if an employee accesses the work systems during off hours to send unusual commands.
Network Analysis – This is a system that monitors traffic across your network to identify unusual packets of information moving around your systems.
Forensics – This is used to identify past or ongoing attacks to determine how systems were affected and how to prevent or defend against similar attacks in the future.
How does this help you?
Having security analytics in place will give you the data required to investigate past or ongoing attacks, learn how the attacks affected your systems, plan for and anticipate future attacks, and help teach us how to defend against those attacks and prepare for the evolution of those attacks.