November 29, 2016 By Martin Borrett 2 min read

Early in November, I spoke to an audience of more than 400 professionals at the Payments U.K. Cyber Security and Fraud Seminar. I thoroughly enjoyed the experience, not least for the fantastic acoustics in the oak-paneled auditorium and the challenging questions that the extremely engaged audience threw my way via Nicholas Witchell, a British journalist and newscaster for BBC News, who served as compere.

 

Cognitive Computing Is the Future of Security

My presentation focused on cognition and the future of security. I was able to share my insights and discuss the exciting innovations that IBM Security has made in this space. The event coincided with the day that the new U.K. Chancellor, Philip Hammond, confirmed the government’s £1.9 billion cybersecurity program for the next five years — very timely indeed.

To set the scene, I discussed the evolution of security, from the pre-2005 moats-and-castles approach of continuously building defenses, to today’s common practice of leveraging security intelligence. We are now entering the Cognitive Era, which provides us with an opportunity to accelerate investigation and response times and reduce the cost and complexity of dealing with cybercrime.

Security teams continue to face an onslaught of serious challenges as threats and fraudulent activities grow in sophistication and volume. With new technologies and strategies, organizations need to think differently about security and ensure that they take a coordinated and sophisticated approach to outsmart attackers, secure their business and improve enterprise risk.

Adapting to the Cognitive Era

To help companies prepare for the Cognitive Era, IBM Security is developing Watson for Cyber Security to help security analysts gain powerful insights, leverage threat research and drive better outcomes through a trusted adviser, in turn enabling better human decision-making.

Watson uses cognitive technology to find, analyze and understand the massive amounts of structured and unstructured security data that overwhelm even the best of today’s security professionals. It exploits data mining, machine learning, natural language processing and human-computer interaction to understand, reason and learn the same way people do.

I am often asked whether this type of technology will replace humans, and my answer remains the same: We will always need human involvement in our quest to protect, detect and respond to security breaches. Security intelligence remains essential — applying cognitive solutions to the effort enhances the analyst’s abilities, providing actionable information with speed and scale like never before. This enables organizations to make faster and more informed decisions. Cognitive security will also help to bridge the skills gap in the industry.

It’s time to adapt to the Cognitive Era.

More from

SoaPy: Stealthy enumeration of Active Directory environments through ADWS

10 min read - Introduction Over time, both targeted and large-scale enumeration of Active Directory (AD) environments have become increasingly detected due to modern defensive solutions. During our internship at X-Force Red this past summer, we noticed FalconForce’s SOAPHound was becoming popular for enumerating Active Directory environments. This tool brought a new perspective to Active Directory enumeration by performing collection via Active Directory Web Services (ADWS) instead of directly through Lightweight Directory Access Protocol (LDAP) as other AD enumeration tools had in the past.…

Smoltalk: RCE in open source agents

26 min read - Big shoutout to Hugging Face and the smolagents team for their cooperation and quick turnaround for a fix! Introduction Recently, I have been working on a side project to automate some pentest reconnaissance with AI agents. Just after I started this project, Hugging Face announced the release of smolagents, a lightweight framework for building AI agents that implements the methodology described in the ReAct paper, emphasizing reasoning through iterative decision-making. Interestingly, smolagents enables agents to reason and act by generating…

4 ways to bring cybersecurity into your community

4 min read - It’s easy to focus on technology when talking about cybersecurity. However, the best prevention measures rely on the education of those who use technology. Organizations training their employees is the first step. But the industry needs to expand the concept of a culture of cybersecurity and take it from where it currently stands as an organizational responsibility to a global perspective.When every person who uses technology — for work, personal use and school — views cybersecurity as their responsibility, it…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today