{"id":4302,"date":"2023-01-13T18:23:41","date_gmt":"2023-01-13T22:23:41","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=4302"},"modified":"2023-01-13T18:24:48","modified_gmt":"2023-01-13T22:24:48","slug":"evolving-cybersecurity-in-the-current-security-landscape","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/","title":{"rendered":"Evolving Cybersecurity in the Current Security Landscape"},"content":{"rendered":"

\"cybersecurity\"<\/p>\n

Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Fadil Mesic of Titaniam<\/a> <\/strong><\/em>examines the past, present, and future of cybersecurity in an ever-evolving landscape.<\/strong><\/em><\/p>\n

\"ExpertCompanies looking to preserve sensitive data may be using some of the most standard security practices, and while these methods are necessary for a complete cybersecurity strategy, more is needed. While once these toolkits may have succeeded in stopping cyber-attacks, today, it just isn\u2019t the case. Cyber-criminals have updated their infiltration methods to steal and extort data, but our security toolkits have stayed the same. Not only is this detrimental to a company\u2019s reputation, should they have data exfiltrated, but it\u2019s directly harmful to those whose data is stolen.<\/p>\n

Today, cyber-criminals are seeking to exfiltrate and extort Personally Identifiable Information (PII) through sophisticated techniques meant to subvert traditional security practices. Current data security platforms and solution sets are falling behind and failing those who have entrusted their data to companies who promised to keep it safe. It is time to look toward the future of cybersecurity and evolve our solution sets.<\/p>\n


Widget not in any sidebars
<\/p>\n

Cybersecurity: Past, Present, and Future in an Evolving Landscape<\/strong><\/h2>\n
\n

Cybersecurity Over the Decades<\/strong><\/h3>\n

Over the years, we\u2019ve seen many variations of data security platforms and how they handle cyber-attacks. It makes sense that, as an industry, we must now begin developing with the next generation of security in mind. The history of cybersecurity shows a clear path of evolution. For instance, in the 1970s and 1980s, security efforts were focused on securing physical computers and equipment. Once these systems became interconnected through the internet, during the late \u201880s and \u201890s, cybersecurity shifted to consider stolen credentials and viruses impacting whole networks. More recently, the 2000s have largely included innovations such as traditional tokenization, machine learning, and behavioral detection software that help filter potential cyber risks. However, today\u2019s cyber landscape is swiftly changing while demanding even more than in previous years. Cybersecurity must now be developed with entirely new and emerging challenges in mind.<\/p>\n

Today\u2019s Cyber Landscape<\/strong><\/h3>\n

Compared to cyber landscapes we\u2019ve seen in the past, our data is more interconnected than ever and this doesn\u2019t appear to be slowing down any time soon. Data analysts expect the global Internet of Things (IoT) – connected devices – to increase by 43 billion in 2023.<\/p>\n

Companies are also ingesting large amounts of personal data, storing them, and, in many cases, actively using them in rich data analytics and index searches. Our cybersecurity challenges today are less focused on physical security than in previous iterations, even though these are still essential components of effective cybersecurity strategies. We see criminals focused more than ever on stealing rich data to extort companies and their customers, and our toolkits and strategies are becoming less effective. Traditional security methods are not securing our sensitive data, which is today\u2019s digital gold. Unfortunately, ransomware has become a hazardous tool that bypasses our current defensive efforts. As security professionals and experts, we must adapt and overcome. It is time to seek newer and innovative ways to keep pace with modern threat actors.<\/p>\n

Cyber-Criminals Changing Tactics<\/strong><\/h3>\n

Within recent years we\u2019ve seen multiple examples of outdated security methods failing to protect and secure sensitive data. Despite collecting vast amounts of our personal data, companies have no secure means of keeping it. Our digital world is in danger because of this. Sensitive information is no longer being protected with traditional methods because cybercriminals are exfiltrating valid credentials into these data stores and infrastructures. All the while, our PII is left inside in many cases in clear-text format. This means that these criminals can easily access, steal and extort PII just by targeting valid employee information from the start. Their tactics are changing, and so must ours.<\/p>\n

These exact scenarios have been seen repeatedly within the last few years.<\/p>\n

    \n
  • In 2017, we saw millions of Americans impacted in one of the worst security breaches to date because of human error.<\/li>\n
  • In 2019, we saw cybercriminals exfiltrate data from a popular social media service because an unpatched security vulnerability was exploited. This left millions of stored user data in peril.<\/li>\n
  • And more recently in 2021, we saw an entire industry feel the impacts of one password falling into the wrong hands.<\/li>\n<\/ul>\n

    Looking to the Future Of Solution Sets<\/strong><\/h3>\n

    The question then becomes, \u201cWhat should data security platforms aim to achieve now? How do we prevent these scenarios in the future?\u201d<\/p>\n

    Today, data-related breaches and extortion have become the main threat among companies seeking to collect and store PII. In a recent study, 70 percent of companies surveyed admitted to experiencing a ransomware attack. Of those companies, 60 percent admitted the same attackers tried extorting them further using the stolen data. It\u2019s become clear that cybercriminals are targeting databases with sensitive information knowing that once they are inside, there is very little to stop them from taking what they want.<\/p>\n

    In the past, companies with standard security hygiene have often used traditional tokenization in conjunction with data encryption methods. This can include data-in-transit and data-at-rest. However, this recent outbreak of data extortion demands more innovative and holistic approaches. One example is high-performance encryption-in-use technology, which could be deployed alongside traditional and emerging security technologies. This would allow companies to use and store collected data while keeping its security in mind and safeguarding PII from antagonistic entities. Keeping sensitive data encrypted at all times throughout its whole lifecycle, including creation, collection, transformation and storage, is extremely important. But, it is the time when data is used (searched, transformed, analyzed) that we need to keep our guard up and retain the same level of protection, as in data-in-transfer and data-at-rest cases. Keeping the data encrypted for as long as possible is a key part of the overall security strategy. In particular, it is the time when the data is passed between different systems, it\u2019s being sanitized, cleared, transformed, loaded into data stores, prepared for use, or it is used (searched and analyzed) that is the most susceptible for exfiltration. In many cases, data is decrypted and often left in clear-text format for extended periods. Multiple copies of the data \u201changing around\u201d in clear-text are a major issue for organizations.<\/p>\n

    High-performance encryption-in-use technology aims to close that missing gap that attackers often exploit to gain access to sensitive data. One of the requirements of such a technology is that it must allow the continuity of established business processes with minimal or no intrusion. It must be easy to deploy and configure, and it must be performant and ubiquitous. Search platforms such as Elasticsearch and OpenSearch have long been plagued by data breaches resulting in the exfiltration of big amounts of sensitive data. In many cases, it was stolen credentials, systems misconfiguration, or both that led to the data being stolen. But, at the core, it is the issue that the data searched was in the clear-text in the first place that allowed the attackers to leave with the sensitive data in their hands.<\/p>\n

    The development community and teams developing and improving search platforms have made some serious efforts in the right direction to harden and protect the search platform by adding a set of security plugins that would restrict access to systems (through black and whitelisting) restrict access to data based on users and roles configured and would limit the amount of the data being returned at once (preventing bulk exfiltration). All of these are good and necessary parts of the overall security posture. However, the data stored in the indices, searched and analyzed, is still kept in clear text, which leaves these systems vulnerable to data exfiltration. Adding high-performance encryption-in-use to these systems encrypts this data at the point of ingest and keeps the data in the systems encrypted at all times, even when it is searched and analyzed. The best thing about it is that end-users do not have to modify their searches or the ways they were analyzing the data. The data is released on a \u201cneed-to-know\u201d basis, supporting business cases of releasing the absolute minimum-necessary clear-text data to authorized individuals only (e.g., for review or report\/results printing) or passing encrypted results of searches to down-stream applications for further analysis or processing. Results of searches can be released in different ways to different users based on the release schemas associated with roles. Each field can be returned in several formats (including encrypted, redacted, masked, partially masked, or clear text when necessary).<\/p>\n

    Solution sets today just aren\u2019t built with today\u2019s security concerns in mind. Companies are collecting more PII for the purpose of analyzing and indexing them for later use, but they aren\u2019t securing them. This rich data is left in vulnerable clear-text formatting. Cybersecurity experts cannot expect to see different results when utilizing the same traditional methods. Instead, these security professionals should begin looking ahead to more innovative and updated methods of cybersecurity, such as high-performance encryption-in-use technology, which can be used alongside traditional security methods and enhance existing defenses.<\/p>\n


    Widget not in any sidebars
    <\/p>\n","protected":false},"excerpt":{"rendered":"

    Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Fadil Mesic of Titaniam examines the past, present, and future of cybersecurity in an ever-evolving landscape. Companies looking to preserve sensitive data may be using some of the most standard security practices, and while these methods […]<\/p>\n","protected":false},"author":469,"featured_media":4303,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[1251,1775,2084,95,1667,2126,1879,1414,1889,1890,1967],"acf":[],"yoast_head":"\nEvolving Cybersecurity in the Current Security Landscape<\/title>\n<meta name=\"description\" content=\"Fadil Mesic of Titaniam examines the past, present, and future of cybersecurity in an ever-evolving landscape.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Evolving Cybersecurity in the Current Security Landscape\" \/>\n<meta property=\"og:description\" content=\"Fadil Mesic of Titaniam examines the past, present, and future of cybersecurity in an ever-evolving landscape.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-13T22:23:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-01-13T22:24:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/01\/Evolving-Cybersecurity-In-The-Current-Security-Landscape.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Fadil Mesic\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fadil Mesic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/\",\"name\":\"Evolving Cybersecurity in the Current Security Landscape\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/01\/Evolving-Cybersecurity-In-The-Current-Security-Landscape.jpg\",\"datePublished\":\"2023-01-13T22:23:41+00:00\",\"dateModified\":\"2023-01-13T22:24:48+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/79bab92aa3b7aa58aa851961dd2605aa\"},\"description\":\"Fadil Mesic of Titaniam examines the past, present, and future of cybersecurity in an ever-evolving landscape.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/01\/Evolving-Cybersecurity-In-The-Current-Security-Landscape.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/01\/Evolving-Cybersecurity-In-The-Current-Security-Landscape.jpg\",\"width\":800,\"height\":400,\"caption\":\"cybersecurity\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Evolving Cybersecurity in the Current Security Landscape\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/79bab92aa3b7aa58aa851961dd2605aa\",\"name\":\"Fadil Mesic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bb36850c35e64eb9b886a1645f989b61?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bb36850c35e64eb9b886a1645f989b61?s=96&d=mm&r=g\",\"caption\":\"Fadil Mesic\"},\"description\":\"With almost 30 years of software engineering experience, Fadil Mesic is the Chief Technology Officer at Titaniam. Prior to Titaniam, he spent five years at Abbott as a Staff Software Engineer, and prior to that, almost nine as a Senior Software Engineer at St. Jude Medical. He earned his MSc in computer engineering from San Jose State.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/fmesic\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Evolving Cybersecurity in the Current Security Landscape","description":"Fadil Mesic of Titaniam examines the past, present, and future of cybersecurity in an ever-evolving landscape.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/","og_locale":"en_US","og_type":"article","og_title":"Evolving Cybersecurity in the Current Security Landscape","og_description":"Fadil Mesic of Titaniam examines the past, present, and future of cybersecurity in an ever-evolving landscape.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2023-01-13T22:23:41+00:00","article_modified_time":"2023-01-13T22:24:48+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/01\/Evolving-Cybersecurity-In-The-Current-Security-Landscape.jpg","type":"image\/jpeg"}],"author":"Fadil Mesic","twitter_misc":{"Written by":"Fadil Mesic","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/","name":"Evolving Cybersecurity in the Current Security Landscape","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/01\/Evolving-Cybersecurity-In-The-Current-Security-Landscape.jpg","datePublished":"2023-01-13T22:23:41+00:00","dateModified":"2023-01-13T22:24:48+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/79bab92aa3b7aa58aa851961dd2605aa"},"description":"Fadil Mesic of Titaniam examines the past, present, and future of cybersecurity in an ever-evolving landscape.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/01\/Evolving-Cybersecurity-In-The-Current-Security-Landscape.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/01\/Evolving-Cybersecurity-In-The-Current-Security-Landscape.jpg","width":800,"height":400,"caption":"cybersecurity"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/evolving-cybersecurity-in-the-current-security-landscape\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Evolving Cybersecurity in the Current Security Landscape"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/79bab92aa3b7aa58aa851961dd2605aa","name":"Fadil Mesic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/bb36850c35e64eb9b886a1645f989b61?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bb36850c35e64eb9b886a1645f989b61?s=96&d=mm&r=g","caption":"Fadil Mesic"},"description":"With almost 30 years of software engineering experience, Fadil Mesic is the Chief Technology Officer at Titaniam. Prior to Titaniam, he spent five years at Abbott as a Staff Software Engineer, and prior to that, almost nine as a Senior Software Engineer at St. Jude Medical. He earned his MSc in computer engineering from San Jose State.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/fmesic\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/4302"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/469"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=4302"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/4302\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/4303"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=4302"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=4302"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=4302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}