Cyber Pro Files

Interset is a user behavior analytics (UBA) solution, which leverages machine learning, big data, and risk forensics to provide an intelligent, accurate detection solution for insider and targeted attacks.

As we hear from Interset’s Vice President of Marketing Bill Munroe, the company’s patented analytics process aggregates data classes (endpoint, directory, SIEM, IP repository), and associates collected events to users, machines, applications and files – then applies risk scores to each.

In this sponsored podcast, Munroe discusses real-world use cases with Security Current’s Vic Wheatman.

GuardiCore provides a real-time breach detection and response solution that leverages threat deception and process-level visibility to quickly detect and respond to advanced threats inside data centers and clouds.

As we hear from GuardiCore Vice President of Marketing Dave Burton, this allows GuardiCore customers to know immediately when their data center has been breached and respond in a fraction of the time of traditional security technologies. In this sponsored podcast, Burton speaks with Security Current’s Vic Wheatman.

ProtectWise offers a Cloud Network DVR, which records everything on the network.

As we hear from ProtectWise Co-founder and Chief Technology Officer (CTO) Gene Stevens, the technology provides long-term retention of full fidelity network data, automated smart retrospection, advanced visualization and the ease of an on-demand service deployment model. In this sponsored podcast, Stevens speaks with Security Current’s Vic Wheatman.

Exabeam is a user behavior analytics (UBA) solution, which leverages existing log data to quickly detect advanced attacks, prioritize incidents and accelerate responses.

UBA solutions, as we hear in this podcast with Exabeam Chief Marketing Officer Rick Caccia, are dynamic and do not rely on static correlation rules but rather use machine learning to automatically understand normal user behavior and raise the alarm when users begin to do multiple things that are out of the norm.

In this sponsored podcast, Caccia speaks with Security Current’s Vic Wheatman.

Morgan Wright is an internationally recognized cybersecurity, cyberterrorism and identity theft expert.

He's testified in front of congress, advised the U.S. State Department and served in law enforcement. In this conversation with Security Current's Vic Wheatman, Morgan speaks about ISIS-inspired cyber terrorism, ransomware, and social engineering as a tool for enabling spear phishing to steal credentials and corrupt business systems.

Training, policy and philosophy are critical, even before security technologies are implemented. As you'll hear from Wright: "Think before you click the link."

With vast amounts of personal information and Internet-enabled medical equipment, health care faces unique security requirements. Some are a result of regulatory mandates such as HIPAA while others are because of the critical clinical equipment found in hospitals and doctors offices.

Gaining visibility into the variety of platforms present while positioning for future needs becomes a challenge. Technologies such as Network Access Control (NAC) can provide a needed overview into the security environment. In this podcast with Security Current’s Vic Wheatman, Barnabas Healthcare’s CISO Hussein Syed and Dominic Hart, the healthcare system’s manager of information security architecture discuss their approach to this complex environment.

Encryption is fundamental to business today. But encryption also allows evildoers to plan nefarious criminal or terrorist acts. Law enforcement, intelligence agencies and political interests have proposed "back doors" to enable them to do their jobs. Shades of the cryptographic device, The Clipper Chip and the Skipjack algorithm! Look it up!

CISO's need to work with stakeholders to find the right balance between their responsibilities in protecting sensitive data and cooperation with law enforcement and Homeland Security. We discuss these and other issues in this conversation between Security Current's Vic Wheatman and Greg Schaffer, FirstBank VP and Information Security Officer.

In the push to launch mission critical applications, insecure software often makes it into production. Sometimes hackers find the gaps and exploit vulnerabilities. Now new approaches are leading to continuous vulnerability testing - by ‘hackers.’

Based on crowdsourcing and by offering bug bounties, Secure Systems Development Life Cycle (SDLC) principles are being enhanced and developers' mindsets are being changed.

Code quality improvements resulted and efficiency improved. In this conversation, SANS Institute Director of Emerging Security Trends John Pescatore tells Security Current's Vic Wheatman what some CISOs and application developers have found by moving in this direction.

Each year is a new opportunity to use what we've learned in the past in order to address the future and anticipate what the bad actors may do next to breach our information security.

Here, the head of information security at Delta Dental of New Jersey addresses what we can expect as we enter 2016, discusses the role of cyber insurance, warns about how old source code can be exploited and highlights how Identity and Access Management and Managed Security Service Providers can help plan the future state of our Information Security.

Listen to Delta Dental of New Jersey's Roota Almeida in conversation with Security Current's Vic Wheatman.

The overall cost of cyber crime in 2015 to the world economy as a whole was estimated at a conservative $575 billion, according to research. Breaches are growing in number and sophistication.

According to Jason Witty, Executive Vice President and CISO at U.S. Bancorp, there are five major sources of information security threats and they are continuing to evolve dramatically.

He identified five high-level classifications which include: insider threats, organized crime, hactivists, terrorists, and nation states.

But as Witty tells Security Current’s Vic Wheatman there is a light at the end of the tunnel. Using security frameworks and taking advantage of new legislation that supports threat information sharing among organizations are some of the most viable approaches to combating the increasingly sophisticated and emerging threats. Hear about these topics, as well as the growth in business email compromise, in this conversation.