{"id":4135,"date":"2022-09-28T16:27:08","date_gmt":"2022-09-28T20:27:08","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=4135"},"modified":"2022-09-28T16:28:03","modified_gmt":"2022-09-28T20:28:03","slug":"empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/","title":{"rendered":"Empowered by Security Log Data: A Guide to Combatting Cyber Fatigue"},"content":{"rendered":"

\"Security<\/p>\n

As part of Solutions Review\u2019s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014\u00a0 Ozan Unlu of Edge Delta<\/a> breaks down how security log data can help combat cyber fatigue, and get security teams back into the fight.<\/strong><\/em><\/p>\n

\"SRA fundamental problem with security log data management at many organizations is effectively balancing a growing avalanche of data coming from a wide range of sources – such as antivirus software, firewalls, intrusion detection, and prevention systems; server operating systems, applications, and more – with a limited quantity of both people and log management resources available to manage it all.<\/p>\n

One of the problems with cyber threats is that these threats can lurk anywhere. Organizations understandably want to harness and leverage as much security log data as possible to ensure they\u2019ve got \u201ceyes in all places\u201d However, with all the data being generated, this task is more overwhelming than ever before. In fact, humans (and machines, for that matter) can barely keep their heads above water as the onslaught continues. Combine this with the fact that today\u2019s attackers are more sophisticated and moving faster than ever before, and you have a perfect scenario for security ops teams to feel as if they are shoveling sand against the tide. In fact, it\u2019s estimated that up to 42 percent of companies report growing cyber fatigue (defined as apathy in proactively defending against attacks). We\u2019ve got to empower them to harness and leverage the full breadth of their security log data. But how?<\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

Security Log Data: 3 Key Points to Empowering Security Ops Teams<\/strong><\/h2>\n
\n

Break Datasets Down into Manageable Chunks All Processing at Once<\/strong><\/h3>\n

The way the process has traditionally worked is known as \u201ccentralize and analyze,\u201d where all security log data is amassed into a central SIEM and retained as one true copy in one highly secure location, often completely siloed from production environments. By ingesting all this data, a security ops team could ensure they had no blind spots, and the data (all pooled together) became contextually richer. However, in recent years, massively growing data volumes mean this approach is no longer viable from either a time or cost perspective. A better approach involves breaking data sets down into smaller clusters and processing all of them simultaneously and in parallel. This is akin to taking a big, overwhelming project, breaking it into manageable bits, and assigning the pieces to various workers who can work independently and contribute meaningfully to the whole.<\/p>\n

Apply Machine Learning at the Source <\/strong><\/h3>\n

As noted earlier, one drawback of the \u201ccentralize and analyze\u201d approach is the latency it introduces. With hackers moving faster than ever before, most organizations just can\u2019t afford such latency anymore. According to recent statistics, the average \u201cbreak out\u201d time (the time it takes for an adversary to move laterally from an initially compromised host to another host within the victim environment) is only about an hour and a half, with the fastest hackers moving much more quickly than that, often requiring only a matter of minutes. Given this accelerated speed, it becomes critical to identify suspicious activity as quickly as possible, and applying machine learning simultaneously across the growing number of security log data sources is an absolute must. The benefits to doing this are twofold: One, when security ops teams analyze security log data at its source, they can identify anomalies much faster than forcing various datasets to \u201cwait in line\u201d to enter the SIEM for analysis. Second, when data is analyzed at the source, security ops teams know immediately and automatically the exact source of the anomaly, helping to reduce cyber response times dramatically.<\/p>\n

Intelligently Filter Security Log Data<\/strong><\/h3>\n

Another drawback of \u201ccentralize and analyze\u201d is the fact that it does not acknowledge that all data is not created equal<\/em>. Security ops teams find themselves running up against data limits and, in many instances exceeding them, hiking up storage costs substantially and often unexpectedly. Keeping an eye on all data is essential. However, a lot of this data will be of lower value, so where it is ultimately relegated for ongoing analysis and retention needs to be carefully considered. For instance, some data can afford to go in lower-cost \u201ccold\u201d retention tiers, while others may belong in a hotter SIEM tier. Intelligently filtering data helps security ops teams avoid the need to make unnecessary compromises. In addition, due to ongoing cost challenges, some security ops teams are forced to make arbitrary decisions on what security log data to include and what to omit, leaving them with obstructed views. With today\u2019s technology, they don\u2019t need to do this– they can have their cake and eat it too.<\/p>\n

\n

Conclusion<\/strong><\/h3>\n

Every year, cybersecurity threats are escalating both in terms of volume and variety. This, plus the ongoing skills shortage, places a significant strain on cybersecurity teams. It is therefore not surprising that as many as 66 percent of CISOs report feeling unprepared. As part of an overarching cybersecurity strategy, comprehensive security log data can be a handy weapon in the arsenal. Unfortunately, the data is currently being generated at a pace that exceeds both natural human and machine limitations. We need new techniques enabling security ops teams and the resources at their disposal to \u201cwork smarter, not harder\u201d– effectively harnessing and leveraging the full breadth of their data stores, and finding novel ways to accomplish this are fast becoming an organizational imperative.<\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

As part of Solutions Review\u2019s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014\u00a0 Ozan Unlu of Edge Delta breaks down how security log data can help combat cyber fatigue, and get security teams back into the fight. A fundamental problem with security log data management at many organizations […]<\/p>\n","protected":false},"author":339,"featured_media":4136,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[1667,1997,1995,1996,1414,86,1912,1991,1994,1993,1990,1992,22],"acf":[],"yoast_head":"\nEmpowered by Security Log Data: A Guide to Combatting Cyber Fatigue<\/title>\n<meta name=\"description\" content=\"Ozan Unlu of Edge Delta breaks down how security log data can help combat cyber fatigue, and get security teams back into the fight.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Empowered by Security Log Data: A Guide to Combatting Cyber Fatigue\" \/>\n<meta property=\"og:description\" content=\"Ozan Unlu of Edge Delta breaks down how security log data can help combat cyber fatigue, and get security teams back into the fight.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-28T20:27:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-28T20:28:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/09\/A-Guide-to-Combatting-Cyber-Fatigue.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ozan Unlu\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ozan Unlu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/\",\"name\":\"Empowered by Security Log Data: A Guide to Combatting Cyber Fatigue\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/09\/A-Guide-to-Combatting-Cyber-Fatigue.jpg\",\"datePublished\":\"2022-09-28T20:27:08+00:00\",\"dateModified\":\"2022-09-28T20:28:03+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/362d887c683f9f919e5edf082da74417\"},\"description\":\"Ozan Unlu of Edge Delta breaks down how security log data can help combat cyber fatigue, and get security teams back into the fight.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/09\/A-Guide-to-Combatting-Cyber-Fatigue.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/09\/A-Guide-to-Combatting-Cyber-Fatigue.jpg\",\"width\":800,\"height\":400,\"caption\":\"Security Log Data\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Empowered by Security Log Data: A Guide to Combatting Cyber Fatigue\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/362d887c683f9f919e5edf082da74417\",\"name\":\"Ozan Unlu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a79843a128594d32dfb452cddeb85dd7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a79843a128594d32dfb452cddeb85dd7?s=96&d=mm&r=g\",\"caption\":\"Ozan Unlu\"},\"description\":\"Ozan Unlu is the CEO and Founder of Edge Delta, an edge observability platform. Previously he served as a Senior Solutions Architect at Sumo Logic; a Software Development Lead and Program Manager at Microsoft; and a Data Engineer at Boeing. Ozan holds a BS in nanotechnology from the University of Washington.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/ounlu\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Empowered by Security Log Data: A Guide to Combatting Cyber Fatigue","description":"Ozan Unlu of Edge Delta breaks down how security log data can help combat cyber fatigue, and get security teams back into the fight.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/","og_locale":"en_US","og_type":"article","og_title":"Empowered by Security Log Data: A Guide to Combatting Cyber Fatigue","og_description":"Ozan Unlu of Edge Delta breaks down how security log data can help combat cyber fatigue, and get security teams back into the fight.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2022-09-28T20:27:08+00:00","article_modified_time":"2022-09-28T20:28:03+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/09\/A-Guide-to-Combatting-Cyber-Fatigue.jpg","type":"image\/jpeg"}],"author":"Ozan Unlu","twitter_misc":{"Written by":"Ozan Unlu","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/","name":"Empowered by Security Log Data: A Guide to Combatting Cyber Fatigue","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/09\/A-Guide-to-Combatting-Cyber-Fatigue.jpg","datePublished":"2022-09-28T20:27:08+00:00","dateModified":"2022-09-28T20:28:03+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/362d887c683f9f919e5edf082da74417"},"description":"Ozan Unlu of Edge Delta breaks down how security log data can help combat cyber fatigue, and get security teams back into the fight.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/09\/A-Guide-to-Combatting-Cyber-Fatigue.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/09\/A-Guide-to-Combatting-Cyber-Fatigue.jpg","width":800,"height":400,"caption":"Security Log Data"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/empowered-by-security-log-data-a-guide-to-combatting-cyber-fatigue\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Empowered by Security Log Data: A Guide to Combatting Cyber Fatigue"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/362d887c683f9f919e5edf082da74417","name":"Ozan Unlu","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a79843a128594d32dfb452cddeb85dd7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a79843a128594d32dfb452cddeb85dd7?s=96&d=mm&r=g","caption":"Ozan Unlu"},"description":"Ozan Unlu is the CEO and Founder of Edge Delta, an edge observability platform. Previously he served as a Senior Solutions Architect at Sumo Logic; a Software Development Lead and Program Manager at Microsoft; and a Data Engineer at Boeing. Ozan holds a BS in nanotechnology from the University of Washington.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/ounlu\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/4135"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/339"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=4135"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/4135\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/4136"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=4135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=4135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=4135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}