Security Analytics: Don’t Let Your Data Lake Turn Into A Data Swamp
December 21, 2016
It’s easy to get bogged down when looking for insights from data using Hadoop. But that doesn’t have to happen, and these tips can help.
Many technology and security teams, particularly in finance, are running data lake projects together to build data analytics capabilities using Hadoop.
The goal for security teams that are doing this is to create a platform that lets them gain meaningful, timely insights from similar data to help solve a wide range of problems. These problems range from continuous monitoring of cyber hygiene factors across the IT environment (e.g., asset, vulnerability, configuration, and access management) to identifying threat actors moving across their networks by correlating logs across large, cumbersome data sets such as those from Web proxies, Active Directory, DNS, and NetFlow.