User Behavior Analytics And The Benefits To Companies

transcript

User Behavior Analytics

And the Organizational Benefits

SpectorSoft

• Insider threat, targeted attack, financial fraud detection• Focused on patterns of human behavior• Understanding normal & flagging anomalies that indicate threat

User Activity Monitoring• Collection and inspection of activity data (logs)• Hi-risk, response, investigations, post-mortems• Rich contextual data source

User Behavior Analytics• All about making you more secure• Threats are not only external• Average time to detect an insider threat?

• 32 days• Average time to respond?

• 17 days• Budgets are not aligned with reality

• 52% perceive negligent employees as cause of significant damage

• 44% spend are spending 10% or less on solutions that focus on insider threats

• Over 40% don’t even know what they spend

Statistics taken from Insider Threats and the Need for Fast and Directed Response - A SANS Survey.

Not in my backyard

3.8 50% $100k - $2M+

* Crowd-based research in cooperation with the 260,000+ member Information Security Community on LinkedIn

Cards on the table

What risk do your insiders pose?10

Focus: Detection

Detect• You are most concerned

with data leak / breach / theft – data exfiltration

• Focus on detecting data exfiltration potential

• Direct that focus to where the insider interacts with the data

Detect10

• Detection of insider threats

• Patterns of human behavior

• Algorithms and statistical analysis to detect meaningful anomalies – indications of potential threat

User Activity Monitoring

• Collection of data focused on the interaction between user and resource

• Detailed and contextual user activity log

• Review: Alerts, reports, playback, and search

Spector 360 Recon

Detail10

• Detection of insider threats

• Patterns of human behavior

• Algorithms and statistical analysis to detect meaningful anomalies – indications of potential threat

User Activity Monitoring

• Collection of data focused on the interaction between user and resource

• Detailed and contextual user activity log

• Review: Alerts, reports, playback, and search

Spector 360

Closing Thoughts– Estimates suggest that 70% of the value of the average

business is held within information systems– Less than 3% of all info tech & security $ are spent

protecting or safeguarding electonic or hard copy proprietary information*

– The vast majority of these $ are spent in an effort to keep outsiders out*

– Little is done to protect proprietary information from the untrained or disgruntled employee.*

*Dan Smartwood, former Director of Information Safeguarding at Walt Disney Corp, testifying before Congress

What next?• Review your history of security problems

– What % were caused by external v insider?• Look at your budget

– What % are you spending on insider security• Review your incident response plan

– Does it have special provisions for an insider incident• http://webinar.spectorsoft.com/insider-threats-find-early-fix-fast

• Focus on detection

Benefit from UBA

Download:www.spector360recon.com/trial/

Increasing Security & Productivity through Insider Intelligence:http://bit.ly/1MPoIgF

“By 2018, organizations that monitor and analyze a broad spectrum or employee activities will experience 50% fewer insider data breaches than organizations that monitor internal communications only.”

Market Guide for Employee-Monitoring Products and Services Andrew Walls, Research Vice President, Gartner Research, 25 February 2015

User Behavior Analytics And The Benefits To Companies

Software