How Heartbleed Is Changing Security
IBM today extended the scope of its security intelligence framework to create the IBM Threat Protection System, which is aimed at creating a closed-loop approach to security management that spans from the discovery of the vulnerability to remediation of known breaches.
Based on an array of security technologies that IBM both developed and acquired, the IBM Threat Protection System includes a new IBM Trusteer Apex solution for quarantining malware on endpoints. The system also provides enhanced forensics tools and the ability to block identified security threats via a single click using the IBM QRadar security intelligence platform.
In addition, IBM is launching a Critical Data Protection Program designed to safeguard an organization’s most critical intellectual property.
Kevin Skapinetz, director for product and security strategy for IBM, says the IBM Threat Protection System is designed to help IT organizations counter everything from the most advanced persistent threats (APTs) to massive waves of attacks designed to overwhelm and paralyze IT security defenses.
Regardless of the increased scale and lethality of the attacks, IT organizations are still confronted with the same core security issues. IT organizations need to be right every day, while purveyors of malware need to be right only once. Unfortunately, there’s never been more at risk. Two IBM-commissioned surveys from the Ponemon Institute found the cost of a data breach increased by 15 percent, reaching an average of $3.5 million. The studies also found that targeted attacks can now cost businesses $9.4 million in brand equity alone.
No matter what the business is defending against, the organization’s war on modern malware requires more reliance on automation and intelligence than ever before. The challenge, of course, is that most organizations don’t have the time and resources needed to develop those capabilities on their own. Once you come to terms with that new reality, relying on IT security provided as a service is really the only IT security option that makes any sense.
Naturally, IBM isn’t the only company trying to deliver the security intelligence platforms to provide those services. But given the commitment IBM has made to craft those services, it would seem that IBM is determined to play a leading role in the IT security war that is likely to continue well into the middle of this century and beyond.
