Story image

Transformative SIEM solution to tackle security professional shortage

25 May 2018

The world has a shortage of cybersecurity professionals. In fact, new security vendor Jask believes the US alone has a shortage of 300,000 cybersecurity professionals, with the number being 3.5 million globally.

The worry is that the short-staffed security operations centres are drowning in thousands of alerts and warnings across their organisation's networks. Yet an attacker only needs to succeed in one attack amongst these missed warnings to achieve their purpose.

So far the solution has been for organisations to try and hire as many security analysts as possible. Then sit them in front of security information & event management (SIEM) solutions from vendors like LogRythm, Splunk and ArcSight.

These SIEM solutions do a fantastic job of capturing logs and information from around an organisations network. Although the shortage of skilled professionals available to hire and the huge number of notifications, warnings and alerts being generated in each organisation is leaving areas unmonitored.

Jask is a two-year-old startup who is determined to resolve this issue. They’re applying artificial intelligence (AI) and machine learning to the problem.

The software ingests huge amounts of information from existing SIEM tools, sorts through it using it’s proprietary AI. This could see thousands of warnings turned into a handful of noteworthy recommendations.

Cleverly the AI connects different events that may have occurred in different parts of the organisation's infrastructure and can associate them. Which in turn can show a timeline of unusual activity that individually don’t look suspicious but combined are serious issues.

By highlighting the most serious issues and connecting the dots, a security analyst can focus on high-value investigations rather than manual sorting.

“JASK’s goal is to re-imagine Security Operations, by hiring the best computer scientists, math experts and machine learning gurus to develop the technology that will enable our best SOC analysts around the globe to work together training machines to automate discovering, responding and even learning about tomorrows cyber threats so we can free our SOC analysts to do the work that really matters most: protect our organizations information!” says Greg Martin, Jask CEO and co-founder.

Jask see’s themselves as modernising SOC operations, yet in many ways, they can really make a dent in the skills shortage around the world. One could only imagine how it’s AI and machine learning platform could perform more and more functions within the SOC in future years.

“We have finally reached the perfect storm of technology, policy and opportunity to completely re-factor Security Operations with the major advances in open source big data and AI software and general adoption of cloud-native services throughout the enterprise,” says Martin.

Just last week the company announced a new ‘Special Ops” professional service. Essentially they have hired from competitors a bunch of highly trained security professionals that are available to augment the clients existing cybersecurity staff. Then using their Jask tools provide the latest tactics, techniques and procedures to defend critical assets from advanced cyber attacks.

“I am thrilled with the incredible level of talent we have brought on board, and as far as threat hunting is concerned, the Jask Special Ops team is the most impressive group I’ve come across in my career. In combination with the context and visibility provided by our platform, the team is already delivering tremendous value by engaging with our customers to mitigate and more importantly prevent risk” says Martin.

They now have a commercial product available, with 25 significant customers already in the financial services, telecommunications, healthcare and government industries.

They have received investments from well-known venture capitalists including Battery Ventures, Dell Technology Ventures, TenEleven and Vertical Venture Partners

Why 'right to repair' legislation could be a new lease on life for broken devices
“These companies are profiting at the expense of our environment and our pocketbooks as we become a throw-away society that discards over 6 million tonnes of electronics every year.”
Attacks targeting Cisco Webex extension explode in popularity - WatchGuard
WatchGuard's Internet Security Report for Q4 2018 also finds growing use of a new sextortion phishing malware customised to individual victims.
SAS partners with NVIDIA on deep learning and computer vision
“By partnering with NVIDIA, we combine our strengths to augment human intelligence and realise the true potential of AI.” 
Why businesses must embrace automation to ensure success
“For many younger workers, the traditional view of a steady job at one company, perhaps for life, simply doesn’t reflect reality."
Dropbox invests in hosting data inside Australia
Global collaboration platform Dropbox has announced it will now host Australian customer files onshore to support its growing base in the country.
TYAN unveils new inference-optimised GPU platforms with NVIDIA T4 accelerators
“TYAN servers with NVIDIA T4 GPUs are designed to excel at all accelerated workloads, including machine learning, deep learning, and virtual desktops.”
Worldwide spending on security to reach $103.1bil in 2019 - IDC
Managed security services will be the largest technology category in 2019.
How Cognata and NVIDIA enable autonomous vehicle simulation
“Cognata and NVIDIA are creating a robust solution that will efficiently and safely accelerate autonomous vehicles’ market entry."