{"id":1453,"date":"2018-04-12T15:55:49","date_gmt":"2018-04-12T19:55:49","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=1453"},"modified":"2019-06-24T12:20:12","modified_gmt":"2019-06-24T16:20:12","slug":"machine-learning-siem-security-analytics-know","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/","title":{"rendered":"Machine Learning, SIEM, and Security Analytics: What to Know"},"content":{"rendered":"

\"machine<\/p>\n

What is most known about security analytics<\/a> and SIEM, as components of the enterprise cybersecurity suite, is not that they collect, aggregate, and analyze security data from throughout enterprise networks via detection algorithms. That is certainly true, but the most well-known aspect about them is that they are some of the most challenging solutions to deploy and manage properly. Both security analytics and SIEM require a good deal of human resources and time to monitor the plethora of security event data generated by even a modest enterprise.<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Therefore, more and more enterprises are expressing interest in AI and machine learning as features in their security analytics or SIEM solutions<\/a>. The prospect of automating the difficult processes involved is unsurprisingly appealing. \u00a0<\/span><\/p>\n

But AI and machine learning are still relatively new technologies in cybersecurity. They are still in the experimental phase, in other words. What do they mean for SIEM and security analytics? \u00a0<\/span><\/p>\n

Machine Learning, AI, UEBA: Branches of the Same Tree<\/b><\/h3>\n

Machine learning and UEBA<\/a> are actually two different forms of artificial intelligence (AI) in cybersecurity. For security analytics purposes, AI scans the IT environment, finds patterns, and identifies anomalies. Machine learning more specifically receives human inputs for its scans and learns from the results it receives. User and entity behavior analytics (UEBA) monitors user behaviors, seeks out anomalies in those behaviors, and investigates security incidents that may be at the root of those abnormalities. <\/span><\/p>\n

For machine learning, it is important to remember that it comes in two distinct flavors: supervised and unsupervised. Supervised applications of machine learning can sort through clean, structured data that allows for clear rules and algorithms. Unsupervised applications can examine unstructured data from multiple sources, as is commonly generated in SIEM and security analytics scans. Unsupervised models can be taught using neural networks and deep learning to detect previously unknown enterprise network threats. <\/span><\/p>\n

Robots and SIEM: The Benefits <\/b><\/h3>\n

The most praised benefit of AI and machine learning is the relief it can offer your enterprise\u2019s IT security team. The features can compliment your SIEM and security analytics<\/a> scans, sorting through the gigabytes of security data that even a small enterprise can generate each day. <\/span><\/p>\n

Under normal circumstances, IT security teams have to drop the security logs into a central database and then mine the data for security events\u2014eating up time and energy. Machine learning does that work in real time, allowing human professionals to spend time focusing on more valuable tasks such as investigating the legitimate security events. In a time when cybersecurity talent is stretched thin, this can be a welcome boon to enterprises of any size.<\/span><\/p>\n

Furthermore, machine learning can scan your enterprise\u2019s network far faster than any human could, allowing your SIEM or security analytics solution to catch threats and data breaches faster. This is crucial\u2014as too many businesses have learned, breaches can be quiet and avoid detection until it is far too late. <\/span><\/p>\n

The Drawbacks? <\/b><\/h3>\n

As stated above, AI in SIEM is still very much in its infancy and therefore can suffer from the issues that plague any new technology. Much like SIEM and security analytics overall, machine learning does require time and attention to make sure it is functioning properly and optimally. Furthermore, it is dependent on investigation triggers and understanding behavioral patterns\u2014therefore its algorithms\u2019 effectiveness can be hobbled by poor inputs. <\/span><\/p>\n

Additionally, machine learning and AI in SIEM and security analytics were inspired in part by malicious AI programs created to make hackers\u2019 nefarious tasks easier\u2014it allows for larger and more sophisticated attacks. Whether security AI can stand up to its hacking doppelganger has yet to be seen. <\/span><\/p>\n

Machine learning may not be a cure-all, but it is certainly a powerful feature to consider in your enterprise\u2019s SIEM or security analytics solution.<\/span><\/p>\n


Widget not in any sidebars
\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

What is most known about security analytics and SIEM, as components of the enterprise cybersecurity suite, is not that they collect, aggregate, and analyze security data from throughout enterprise networks via detection algorithms. That is certainly true, but the most well-known aspect about them is that they are some of the most challenging solutions to […]<\/p>\n","protected":false},"author":41,"featured_media":1454,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551],"tags":[451,95,306,21,57,22,280],"acf":[],"yoast_head":"\nMachine Learning, SIEM, and Security Analytics: What to Know<\/title>\n<meta name=\"description\" content=\"More and more enterprises are expressing interest in AI and machine learning as features in their security analytics or SIEM solutions.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Machine Learning, SIEM, and Security Analytics: What to Know\" \/>\n<meta property=\"og:description\" content=\"More and more enterprises are expressing interest in AI and machine learning as features in their security analytics or SIEM solutions.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2018-04-12T19:55:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-06-24T16:20:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/machine-learning-new-mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/\",\"name\":\"Machine Learning, SIEM, and Security Analytics: What to Know\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/machine-learning-new-mod.jpg\",\"datePublished\":\"2018-04-12T19:55:49+00:00\",\"dateModified\":\"2019-06-24T16:20:12+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"More and more enterprises are expressing interest in AI and machine learning as features in their security analytics or SIEM solutions.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/machine-learning-new-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/machine-learning-new-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"machine learning SIEM security analytics\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Machine Learning, SIEM, and Security Analytics: What to Know\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Machine Learning, SIEM, and Security Analytics: What to Know","description":"More and more enterprises are expressing interest in AI and machine learning as features in their security analytics or SIEM solutions.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/","og_locale":"en_US","og_type":"article","og_title":"Machine Learning, SIEM, and Security Analytics: What to Know","og_description":"More and more enterprises are expressing interest in AI and machine learning as features in their security analytics or SIEM solutions.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2018-04-12T19:55:49+00:00","article_modified_time":"2019-06-24T16:20:12+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/machine-learning-new-mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/","name":"Machine Learning, SIEM, and Security Analytics: What to Know","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/machine-learning-new-mod.jpg","datePublished":"2018-04-12T19:55:49+00:00","dateModified":"2019-06-24T16:20:12+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"More and more enterprises are expressing interest in AI and machine learning as features in their security analytics or SIEM solutions.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/machine-learning-new-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/machine-learning-new-mod.jpg","width":800,"height":400,"caption":"machine learning SIEM security analytics"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/machine-learning-siem-security-analytics-know\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Machine Learning, SIEM, and Security Analytics: What to Know"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1453"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=1453"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1453\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/1454"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=1453"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=1453"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=1453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}