Automating Threat Detection: The Importance of Machine Learning

by CSO Online

Cybersecurity professionals and the organizations they attempt to protect are drowning in data about threats and false-positives, with more than250,000 new malicious programs registered every day. Organizations are seeing anywhere from 500 to 200,000 security alerts per day, yet often don’t investigate them. One study shows thatfewer than 1% are investigated. “Most organizations are dealing with 10 to 25 technologies ranging from SIEM [Security Information and Event Management], vulnerability assessment, endpoint detection, threat intelligence and user behavior to incident response,” said cybersecurity guru Jon Oltsik, senior principal analyst, ESG. This is driving a shift in focus from threat detection to incident response, with 92% having deployed, plan to deploy or are interested in deploying machine learning technology to support automation and orchestration, he noted.

https://www.csoonline.com/article/3233191/security/automating-threat-detection-the-importance-of-machine-learning.html

Share on Facebook

from Educational Technology http://people.uis.edu/rschr1/et/?p=32826