School of NBAD Series: NBAD Relationship Anomaly Detection
Charles Herring
20 May 2014
The final installment of the NBAD series covering relationship anomaly detection.
Protecting the Crown Jewels
Charles Herring
Summary of the features in StealthWatch 6.5 that protect sensitive data from theft by insider threat or advanced attack.
Coaxing Heads from the Security Sand
Charles Herring
Some organizations have chosen to adopt a "plausible deniability" strategy to InfoSec. This article outlines some methods of helping these organizations move to a safer security practice.
School of NBAD: NBAD Host Anomaly Detection
Charles Herring
13 May 2014
Part 4 of the NBAD series on host anomaly detection.
Hospitals are Bleeding Data
Charles Herring
9 May 2014
Hospitals are under attack from cyber criminals and state sponsored attackers. This article reviews the cause and some remedies to the poor state of InfoSec in healthcare.
School of NBAD Series: NBAD Behavioral Detection
Charles Herring
6 May 2014
Third part of the network behavioral anomaly detection (NBAD) series on the role of behavioral detection.
School of NBAD Series: NBAD Signature Detection
Charles Herring
In the second part of the NBAD series, signature detection methodologies are examined.
School of NBAD Series: History of NBAD
Charles Herring
24 April 2014
The first part in this series covers the history of Network Behavioral Anomaly Detection (NBAD.)
When An Alarm Isn’t
Charles Herring
25 March 2014
Vendors like to create an ocean of alarms in their products so they can dogpile after an event and claim that "they caught it." This article goes through the dangers of false positives in incident response and how to address them.
Dealing with Insider Threats
Charles Herring
Subscribe to Lancope Blog
The most dangerous and difficult risk to detect to an organization is insider threat. When a trusted asset decides to betray the trust of his benefactor for the sake of ideology, greed or extortion the organization can suffer long lasting damage. This article outlines the nature and strategies of handling insider threat.
