quoting chief equifax security musician
Sep. 10th, 2017 05:24 pm![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
juan_gandhiSusan Mauldin.
Everything that is IP addressable sends us some kind of information to be inspected, so it is not unusual for a security team to have a terabyte of data to sort through in a week. With this data, we’re looking for the needle in the haystack… the anomaly that shows something is not quite right. Our big data challenge is how to sort through all of that data quickly and in a manner that satisfied the use case that we are looking for.”
When that scope expands, the security team typically has to deal with a sudden increase in big data -- logs, alerts, etc. -- making budget planning critical. Right now I'm planning my budget for next year, and I hope I ask for enough disk space and computing power so that the infrastructure is prepared for future attacks. Waiting 24 hours for the next change window is a very hard problem to have, given the CEO and Board are seeking fast answers. Burst capacity is really critical for the security team who needs to find answers quickly.”
src
The kind of people that are responsible for maintaining data security for most of our country.
Snowden and Manning at least knew what they were doing.
Susan: “Big data for security, it's an important concept for us. It was really nothing more than network monitoring before security really became its own profession but even then, you had network analysts who were analyzing packets all the time and looking at firewall logs and proxy traffic and so forth. That was really sort of big data at the time. Now, though, we have so many alerts and logs and access control information that there is information coming from every device on the network, and it’s all IP addressable.
“Generically, every breach has the big data problem. For example, in a malware incident that results in a breach, the malware comes in and spreads across the environment. It’s trying to map your environment to see what's there. In doing so, it touches a number of systems, all of which have logs and alerts in which the security team needs to review. Each IP addressable device has data regarding the packets, how it’s been used, who has been accessing it, etc. Depending on the severity of the breach, the security team may have to interview several people during the investigation… and then the scope expands.
src
The kind of people that are responsible for maintaining data security for most of our country.
Snowden and Manning at least knew what they were doing.
no subject
Date: 2017-09-11 12:35 am (UTC)no subject
Date: 2017-09-11 12:57 am (UTC)Mauldin graduated with a BA in music composition and a Master of Fine Arts degree in music composition both from University of Georgia.
no subject
Date: 2017-09-11 03:12 am (UTC)no subject
Date: 2017-09-11 02:02 am (UTC)no subject
Date: 2017-09-11 03:03 am (UTC)no subject
Date: 2017-09-11 04:27 am (UTC)Но интересно другое - кто ее нанял на такую должность с такими credentials?
В принципе за одно это Эквифакс можно засудить, как gross negligence.
no subject
Date: 2017-09-11 04:46 am (UTC)no subject
Date: 2017-09-11 06:42 pm (UTC)no subject
Date: 2017-09-18 06:56 am (UTC)no subject
Date: 2017-09-15 06:24 am (UTC)no subject
Date: 2017-09-15 02:28 pm (UTC)Ну на должность вроде чиф секюрити так нанимать не стоит, уж очень последствия плохие бывают.
Это все-таки техническая должность, нужно domain knowledge.
no subject
Date: 2017-09-11 08:46 am (UTC)Data Size -> IT Security Budget Size, i.e.
Small Data -> Small Budget
Big Data -> Big Budget
no subject
Date: 2017-09-11 11:15 am (UTC)CSO: мы считаем, что критические апдейты надо устанавливать в 24 часа.
CIO: нам нужно 6 месяцев, чтобы выкатить любой апдейт в продакшн и не разнести всю эту халабуду вдребезги пополам.
CIO wins every time.
Хороший CSO в большой организации - это не тот, кто лично с утра нашел новый RCE, а тот, кто выиграл войну с CIO.
Сноуден и Маннинг вообще ни о чем. Украсть пачку файлов с сервера - больших организационных способностей тут не надо.
Вот только
Date: 2017-09-11 11:48 am (UTC)Если так, то претензии к тётке могут быть разве что про ликвидацию последствий.
no subject
Date: 2017-09-11 02:24 pm (UTC)no subject
Date: 2017-09-11 06:40 pm (UTC)детализируйте (хоть бы и пальцем ткните) - а то у вас выступление в стиле социалите, да причем женского пола, получилось: "мы ж все понимаем!"
с хаштагом не поспоришь...
Date: 2017-09-18 04:31 am (UTC)Re: с хаштагом не поспоришь...
Date: 2017-09-18 04:40 am (UTC)well
Date: 2017-09-18 05:00 am (UTC)but that CISO person was clearly out of place, as the word salad in that interview shows
no subject
Date: 2017-09-15 06:21 am (UTC)no subject
Date: 2017-09-18 07:01 am (UTC)