My Tweets of the Week (05-09 August 2013)

My tweets of the week (05-09 August 2013) at https://twitter.com/MCasassaMont:

 

·         3 Ways To Develop A Big Data Strategy - http://www.forbes.com/sites/centurylink/2013/08/08/3-ways-to-develop-a-big-data-strategy/ … #in

·         RAM wars: RRAM vs. 3D NAND flash, and the winner is...us - http://www.computerworld.com/s/article/9241488/RAM_wars_RRAM_vs._3D_NAND_flash_and_the_winner_is...us … #in

·         Enterprise whales leave R&D to the startup minnows - http://www.theregister.co.uk/2013/08/09/you_will_be_assimilated/ … #in

·         IT's new role as big data stewards - http://www.techrepublic.com/blog/big-data-analytics/its-new-role-as-big-data-stewards/ … #in

·         The 7 Steps Of Big Data: How To Make It Work - http://www.forbes.com/sites/netapp/2013/08/07/7-steps-of-big-data/ … #in

·         How big data platforms should work - http://www.infoworld.com/t/big-data/joyent-cto-how-big-data-platforms-should-work-224299?page=0,0 … #in

·         The Need for Speed with Big Data - http://www.businessweek.com/articles/2013-08-06/the-need-for-speed-with-big-data … #in

·         Detect the undetectable: Start with event logs - http://www.infoworld.com/d/security/detect-the-undetectable-start-event-logs-224173 …? #in

·         Banks seek big data, analytics and security start-ups for tech accelerator - http://www.zdnet.com/banks-seek-big-data-analytics-and-security-start-ups-for-tech-accelerator-7000018986/ … #in

·         Malware-as-a-service blossoms in Russia, vendor research finds - http://www.networkworld.com/news/2013/080513-lookout-malware-272528.html?hpg1=bn … #in

·         DMARC: another step forward in the fight against phishing? - http://isc.sans.edu/diary/DMARC+another+step+forward+in+the+fight+against+phishing+/16297 … #in

·         10 big data trends changing the face of business - http://www.infoworld.com/slideshow/113454/10-big-data-trends-changing-the-face-of-business-223969#slide1 … #in

·         Big Data strategy essentials for business and IT - http://www.ft.com/cms/s/0/e1a68da8-fb98-11e2-8650-00144feabdc0.html#axzz2b5Eqopic … #in

·         A strategic approach to cloud integration - http://www.networkworld.com/news/tech/2013/080213-cloud-integration-272502.html?hpg1=bn … #in

·         There's a tide of unstructured data coming - start swimming - http://www.theregister.co.uk/2013/08/05/unstructured_data/ … #in

 

 

--- Posted by Marco Casassa Mont (here and here)  ---

--- NOTE:  use this mirror blog if you prefer posting on an external blog site  ---

--- NOTE:  my original HP blog can be found here  ---

Big Data for Security: On Using DNS Logs for Security Threat Detection

I am particularly interested in the area resulting from the intersection of the following topics: big data for security, big data analytics, distributed programming and data analysis solutions, security and cloud.

 

In particular I am interested in public case studies, business cases and trials involving the usage of (large amounts of) DNS data to detect new security threats and issues.

 

Here are some key related work and approaches:

·         EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis;

·         Large scale DNS analysis

·         Identifying malicious domains in large DNS resolver datasets using Hadoop

·         Emerging trends around big data analytics and security: Panel

·         Botnet detection by monitoring group activities in DNS traffic

·         DNS Based Security Incidents Detection in Campus Network

·         DNS-based Detection of Scanning Worms in an Enterprise Network

·         Cache poisoning detection method for improving security of recursive DNS

·         Preserving the big picture: Visual network traffic analysis with tnv

  

--- Posted by Marco Casassa Mont (here and here)  ---

--- NOTE:  use this mirror blog if you prefer posting on an external blog site  ---

--- NOTE:  my original HP blog can be found here  ---

My Updated Work and Personal Web Sites

I recently updated my personal and HP Labs web sites with news, deliverables and achievements, in the space of Security, Cloud and Big Data:

·         My HP Labs Web Page

·         My Personal Web Page

 

--- Posted by Marco Casassa Mont (here and here)  ---

--- NOTE:  use this mirror blog if you prefer posting on an external blog site  ---

--- NOTE:  my original HP blog can be found here  ---

My Tweets of the Week (22-26 July 2013)

My tweets of the week (22-26 July 2013) at https://twitter.com/MCasassaMont:

 

·         The open source job market is booming - http://www.infoworld.com/t/information-technology-careers/the-open-source-job-market-booming-223463 … #in

·         Three different roads to the 3-nanometer chip - http://www.theregister.co.uk/2013/07/25/proposed_semiconductor_transistor_possibilities/ … #in

·         With big data comes big responsibility - http://www.ft.com/cms/s/0/1c3e27ee-8b2f-11e2-8fcf-00144feabdc0.html#axzz2a58CgPqZ … #in

·         “Big Data” Is Not “Big Data” Unless It Gives You Actionable Insight - http://searchengineland.com/big-data-is-not-big-data-unless-it-gives-you-actionable-insight-167225 … #in

·         Loose lips trouble CISOs - http://www.scmagazineuk.com/loose-lips-trouble-cisos/article/304467/ … #in

·         Researchers spot new breed of infected Android apps in the wild - http://www.infoworld.com/t/android/researchers-spot-new-breed-of-infected-android-apps-in-the-wild-223400 … #in

·         Graph analysis will make big data even bigger - http://www.infoworld.com/d/big-data/graph-analysis-will-make-big-data-even-bigger-223420 … #in

·         CFOs Ignore Big Data at Their Peril - http://online.wsj.com/article/SB10001424127887323419604578571684135006800.html … #in

·         Competing businesses encouraged to share incident data as the attackers do - http://www.scmagazineuk.com/competing-businesses-encouraged-to-share-incident-data-as-the-attackers-do/article/304122/ … #in

·         FTSE 350 companies demonstrate very poor security manners - http://www.scmagazineuk.com/ftse-350-companies-demonstrate-very-poor-security-manners/article/304195/ … #in

·         Stop 80 percent of malicious attacks now - http://www.infoworld.com/d/security/stop-80-percent-of-malicious-attacks-now-223213 … #in

·         SDN 101: Software-defined networking explained in 10 easy steps - http://www.infoworld.com/slideshow/111753/sdn-101-software-defined-networking-explained-in-10-easy-steps-223225 … #in

·         Big Data Security Analytics: It Takes a Village - http://www.networkworld.com/community/node/83299 … #in

·         Software employment rises 45% in 10 years, as angst in engineering grows - http://www.computerworld.com/s/article/9240854/Software_employment_rises_45_in_10_years_as_angst_in_engineering_grows … #in

·         Happy birthday, OpenStack! Now change - http://www.networkworld.com/news/2013/072213-openstack-272063.html?hpg1=bn … #in

·         True tales of (mostly) white-hat hacking - http://www.infoworld.com/d/security/true-tales-of-mostly-white-hat-hacking-222831 … #in

·         Five Roles You Need on Your Big Data Team - http://blogs.hbr.org/cs/2013/07/five_roles_you_need_on_your_bi.html … #in

·         SIM card DES flaw could affect up to 500 million users - http://www.scmagazineuk.com/  #in

·         Are we in an enterprise startup bubble? - http://www.infoworld.com/t/startups/are-we-in-enterprise-startup-bubble-223138 … #in

 

--- Posted by Marco Casassa Mont (here and here)  ---

--- NOTE:  use this mirror blog if you prefer posting on an external blog site  ---

--- NOTE:  my original HP blog can be found here  ---

 

On Big Data for Security

I am currently focusing my R&D work in the space of “Big Data for Security”.

This is a fascinating area and, currently, a green field.

 

How to effectively leverage huge amount of collected IT information (ranging from IT logs to application and service information as well as external intelligence)  to identify new security threats, issues and provide valuable information to organisations to mitigate current and foreseeable risks?

 

HP already has core assets in the security and “Big Data” space: HP ArcSight suite (SIEM solution for event logging, storage and correlation); HP Vertica (highly parallelised, columnar database solution for storage and analytics of structured big data) and HP Autonomy (storage, indexing and retrieval of massive amount of unstructured data).

 

I am currently exploring how these capabilities could be fully leveraged in the context of big data for security, in particular in a few security verticals and types of critical security data. In addition, I am interested in exploring how the massive amount of required computation and analytics can be performed by adopting innovative solutions in the cloud (private and hybrid cloud).

 

I am looking for public use cases, case studies and requirements in this space, in particular for analytics based on big security data and anecdotes on how “big data” has been helping to address security issues.

 

 

--- Posted by Marco Casassa Mont (here and here)  ---

--- NOTE:  use this mirror blog if you prefer posting on an external blog site  ---

--- NOTE:  my original HP blog can be found here  ---

 

HP Labs Research

HP Labs has updated its Research web page, providing an overview of its 5 key research focus areas. More information is available here.

 

--- Posted by Marco Casassa Mont (here and here)  ---

--- NOTE:  use this mirror blog if you prefer posting on an external blog site  ---

--- NOTE:  my original HP blog can be found here  ---

On HP Moonshot Server Solutions

Recently HP launched the HP Moonshoot server solutions.

An interesting video titled “Meet the Innovators behind HP Moonshoot” is available online, here.

 

--- Posted by Marco Casassa Mont (here and here)  ---

--- NOTE:  use this mirror blog if you prefer posting on an external blog site  ---

--- NOTE:  my original HP blog can be found here  ---

More on Safe Information Sharing in the Cloud

With the adoption of services in the Cloud, organisations inevitably lose control on their IT and might lack the critical information required to assess a variety of (business, performance and security) risks.


Traditional approaches based on SLAs and contractual agreements only partially address the above issues, as they provide only a “predefined” and static “view” of the situation which does not cope well against fully dynamic, ever changing IT operations and threat landscapes.

In this context, enabling more dynamic, controlled information sharing in the Cloud is key to improve situational awareness and address the above issues. This involves dealing with tension points between information sharers and sharees (about what to share, why to share, how to control information flows, etc.) along with trust and assurance issues.
More R&D is required in this area, in particular on how to provide safe information sharing and the relevant controls on the information flows.
At HP Labs, Cloud and Security Lab (CSL), we work in this space: we aim at shaping the vision and providing concrete solutions to be used in the market.
In previous blogs of mine, I provided an overview of our vision and related demonstrators we developed to convey it, in the space of Situational Awareness and Information Sharing in the Cloud, in particular in the context of Disaggregated IT.

I also briefly discussed the R&D work we do to provide better predictive analytics based on collected and shared data, in particular in the area of strategic security risk assessment (see our work on SILAS - Security Intelligence-as-a-Service).

I am looking for additional, concrete examples and case studies illustrating how current cloud adopters cope with situational awareness and assessment of the involved IT operation and business risks – including pros and cons or current approaches. Your input in terms of requirements, scenarios and feedback is welcome.

--- Posted by Marco Casassa Mont (here and here) ---

--- NOTE: use this mirror blog if you prefer posting on an external blog site ---

--- NOTE: my original HP blog can be found here ---

On Policy Decision Support for Big Data

When dealing with big data (inclusive of hybrid and unstructured one), it is very hard to understand the implications and impact of defining (security, business, sharing, privacy, etc.) policies on this data.
Which data is actually affected by the policies? Are these policies comprehensive? Are there corner cases that are not covered? Further complexity is introduced by the fact that analytics can be performed on big data, whose outcomes and implications are unknown at priori, as well.
Decision support tools are required to help policy makers to explore the implications of defining policies on big data and related analytics. In my view, these tools must provide synthetic visualization of big data as well as real-time feedback on the implications of defining specific policies and related constraints.
I am looking for:

- Tools providing synthetic, visualization of big data as well as potential analytics

- Public documentation, approaches, case studies, solutions, etc. describing how businesses currently cope with the consequences of defining (security, business, privacy, sharing, etc.) policies on big data



--- Posted by Marco Casassa Mont (here and here) ---

--- NOTE: use this mirror blog if you prefer posting on an external blog site ---

--- NOTE: my original HP blog can be found here ---