- Big Data enables various capabilities like forensics and the analysis of long-term historical trends. By collecting data and analyzing historical trends, you would be able identify when an attack started, and what were the steps that the attacker took to get a hold of your systems. These techniques could play a key role to detect threats at an early stage. Big Data provides opportunity to consolidate and analyze logs automatically from multiple sources rather than in isolation. This enhances intrusion detection systems (IDS) and intrusion prevention systems (IPS). Integrating information from physical security systems, such as building access controls and even CCTV, could also enhance IDS and IPS to a point where insider attacks and social engineering are factored in to the detection process. This presents the possibility of significantly more advanced detection of fraud and criminal activities. Big Data could result in far more practical and successful SIEM, IDS and IPS implementations. Read more at- http://www.techrepublic.com/blog/big-data-analytics/how-big-data-is-changing-the-security-analytics-landscape/
Related Posts