Getting smarter about alerts
Steve Mansfield-Devine · Computer Fraud & Security · 2015
Most organisations of any appreciable size are now equipped with layers of information security, including firewalls, intrusion detection and prevention systems, file integrity monitoring and security incident and event management. These systems log massive amounts of data about network activity and frequently raise alarms. So why do breaches still happen? We spoke with Mark Kedgley, CTO of New Net Technologies. Most organisations of any appreciable size are now equipped with layers of information security that log massive amounts of data about network activity and frequently raise alarms. This means network intrusions are often lost in the noise. Perhaps we need to get smarter about how we manage alerts. In this interview, Mark Kedgley of New Net Technologies talks about ‘closed-loop intelligent control’, based on file integrity monitoring, that can help to tune out the noise and make it easier to spot the threats.