CTOvision.com

Context for the CTO, CIO, CISO and Data Scientist

You are here: Home / Archives for Artificial Intelligence / Big Data and Analytics

Big Data Is About New Designs and New Ways Of Doing Things

Big Data Can Be A Useful Term If It Motivates Continued Change

big-data In today's world where data is everywhere the term "Big Data" may be losing some of its usefulness. The term came into widespread use in 2007 (see a short history of Big Data here), and was very important in helping people to realize that new approaches were needed to data challenges. Now that large data systems are common and AI/ML is being used to leverage these big data sets, the use of the term is dropping off. We still use it, since when used correctly it can help motivate change. In most every case where Big Data is being usefully applied today, it is associated with analytics. This is frequently the "so what" of Big Data. It is also closely related to the construct of Artificial Intelligence, since for AI concepts like Machine Learning and Deep Learning to work, large quantities of data and well thought out data architectures are required.
And clearly continued change is still needed. There are no simple answers to overwhelming data challenges, but one thing is clear. The answer to our challenges is not “less data.” The reasons we have so much data is the continued drive to improve business outcomes in industry, the need to pursue scientific discovery in academia, and the need to improve government support to citizens and the mission of government. We need new concepts and technologies to deal with these massive amounts of new data. We need new ways of doing more analysis and gaining more understanding, and of course we need smart data solutions.

Stay In The Loop: Sign Up To Receive the CTOvision Daily

When it it time to research the great providers of Big Data Analytics Solutions, kick off  your search in the CTOvision Disruptive Technology Finder. Pay particular attention to our Big Data Companies section. For help putting all this information into context for your business, consider tapping into Crucial Point's CTO-as-a-Service or Technology Due Diligence offerings, both are ways to quickly leverage the technical talents of experienced enterprise technology professionals.

CTO Guide To The Business of Bigdata

big-dataThe CTOvision guide to the business of Big Data is designed to help enterprise technologists track this megatrend in actionable ways.

For years now people and our sensors and our computers have been generating more information than we can analyze. Breakthrough methodologies and new scalable data approaches based around Hadoop hold great promise to helping us make sense over increasingly large data sets. Sensemaking is key to success in most all other technology advancements. The ethical considerations around privacy and security over data will only grow.

The growth of Big Data has been foundational to the ability of enterprises to leverage Artificial Intelligence. The two megatrends have to be tracked separately, but are related (you can analyze Big Data without AI, but it is hard to do AI without Big Data).

A snapshot of the Big Data trend right now indicates:

  • Estimates of 1 Trillion sensors by 2020
  • Breakthrough methodologies and new scalable data approaches based around Hadoop hold great promise in sensemaking over large data sets.
  • Sensemaking is key to success in most all other technology advancements.
  • Ethical considerations around privacy and security over data will only grow.
  • How ethical considerations are resolved will depend on culture, politics, other factors.

Open questions decision-makers should track include:

  • Can there be widely accepted ethical frameworks for data and its use?
  • Who will individual citizens trust to analyze their personal, home, auto data?
  • Can behavioral analytics enhance service and security?
  • What can adversaries do to attack enterprises via attacking data?

Impact of Big Data trends on Due Diligence assessments:

The trend of Big Data is an increasingly important element of corporate Due Diligence.

  • On the sell side: Firms should ensure their data architectures are optimized and data is protected. Privacy considerations are also key and should be optimized prior to sell, as should compliance issues (especially compliance with GDPR and California 2020).
  • On the buy side: Buyers should pay particular attention to the security and ethics around data policies and architectures.

Strategically, the evaluations of firms is an art requiring assessment of how unique the capability is and how much in demand it will be in the market. We provide due diligence consulting via our consulting arm, OODA LLC.

The way most enterprise technologists see these Big Data megatrend up close and personal is through the offerings of the companies providing big data solutions. For our reviews of the most disruptive technologies in the big data space see our Big Data Companies list.

For alerts on future posts on this topic see CTOvision Newsletters.

Latest Entries in the CTOvision Directory of Big Data Firms:

[wp_show_posts id=”108845″]

Additional reporting on Big Data and Analytics:

There are seven key megatrends driving the future of enterprise IT. You can remember them all with the mnemonic acronym CAMBRIC, which stands for Cloud Computing, Artificial Intelligence, Mobility, Big Data, Robotics, Internet of Things, CyberSecurity.

Track the most disruptive technologies by diving into our categorized index:

Artificial Intelligence Companies – A fast overview of Artificial Intelligence companies we believe are poised to cause the most positive disruption in the enterprise.

Big Data Companies – Reference to the greatest, most disruptive Big Data companies in the tech ecosystem.

Business Intelligence Companies – We assess these to be the Business Intelligence Companies most impactful for delivering real decision advantage.

Cybersecurity Companies – We apply our deep expertise in cybersecurity to assessing the best across multiple categories including:

Cloud Computing Companies – We include both platform and software as a service providers, capturing only the most innovative and disruptive.

Collaborative Tool Companies – These are the firms that help humans connect to humans to create, manage and lead.

Infrastructure Companies – Critical enterprise foundations for business agility.

IoT Companies – Internet of Things and Industrial Internet of Things are here. How do you manage them?

Mobile Companies – Help manage, configure, secure and optimize these very powerful capabilities.

Robotics Companies – Including innovations in Robotic Process Automation, Drones, and industrial robotics.

Services Companies – We only track a few, the ones we really know well.

Tech Titans – These are the big players. We track the tech titans closely since their capabilities change continuously.

VC, PE and Finance Companies – Keeping an eye on the investors can give indications of coming developments.

You can also use our topical pages to get up to speed quickly on the current status of the major megatrends. See our pages on Cloud Computing, Artificial Intelligence, Mobility, Big Data, Robotics, Internet of Things, Cybersecurity and Blockchain and Cryptocurrencies.

We also provide special pages focused on high interest topics, including Science Fiction, Entertainment, Cyber War, Tech Careers, Training and Education and Tech Tips.

SitScape CEO Kevin Yin will speak on the Webinar “Actionable Intelligence for the Performance-Based Operations Center” Sep 19, 2018

I’ve been very proud to be on SitScape’s advisory board, it has been a great way to learn how these guys are continually innovating to help bring advanced operational intelligence solutions to enterprise decision making processes.

If you are on the look out for best practices and lessons learned on bringing operational intelligence to your enterprise we recommend you sign up for the webinar described below.

Diversified,a leading provider in full-service systems and media technology integration hosts a webinar series on Security Operations Centers. The next webinar focuses on “Actionable Intelligence for the Performance Based Operations Center.” It is scheduled to run 3-3pm EST Wednesday Sep 19, 2018.

It is hosted by Robert Cameron, the Director of Strategic Initiatives at Diversified. SitScape’s CEO Kevin Yin has been invited to join as the Guest Speaker for this webinar.

To get more info and register see: https://lnkd.in/eWRpBJh

Former CIA Officer Richards J. Heuer

Today we learned of the passing of Richards J. (Dick) Heuer.

So many of us were influenced by Dick Heuer and his writings. His first public writing on the discipline of intelligence analysis began in 1979 upon his retirement from the CIA. Later he would pull together his many articles to form the basis of his seminal work, Psychology of Intelligence Analysis, which helped improve the quality of intelligence analysis and became one of the most superior and lasting texts of intelligence literature.

His writings helped intelligence community analysts realize they have to confront their own human biases and always consider the right mental models when conducting analysis. He also helped many of us realize that the rush to always get more data is not always the right approach to improving analysis. There are times when we have all the data we need but do not apply the right analytical methods or let our bias creep in and cloud our judgement.

In 2010 co-authored the book Structured Analytic Techniques for Intelligence Analysis which highlight 55 structured analytic techniques. This book can help leaders in intelligence, law enforcement and business ensure they are considering the right mental models when approaching an analytical challenge.

With all the challenges facing humanity today, Heuer’s works are more important than ever. Every big challenge out there, including topics like the environment, the economy, the struggle between open societies and closed societies and healthcare, all have data associated with them. Having data does not seem to be the key issue in these domains. Having the right analytical methods and models may be far more important at this point.

 

For more on these topics see the CTOvision Guide to National Security Technology and

More from CTOvision:

Cyberwar and Cybersecurity:

SciFi:

Robots:

Tech Titan Reporting:

 

Want The Government To Do Something About Cybersecurity or AI? Advocate Congress establish a permanent joint committee on information technology

The United States Congress Permanent Joint Committee on Information Technology does not exist, yet.

But with attack after attack against our nation’s IT systems the time has come to consider the idea.

First, some background on what a Joint Committee of Congress can be. Congress has great leeway in how it executes its constitutionally mandated responsibilities to legislate and fund. On some particularly thorny issues, joint committees which include members of both the House and Senate can be formed. Once in history, Congress decided there was an issue of such significant national importance that they passed a law establishing a permanent joint committee with legislative authority. This was the United States Congress Joint Committee on Atomic Energy (JCAE).

This joint committee was formed in response to both a dramatic threat and an incredible opportunity. The threat was the potential of nuclear war. The opportunity was the potential to use nuclear science to generate electricity to power cities as well as naval vessels, as well as opportunities to use nuclear science in medicine and industry. It was clear to congress at the time that success in response to the threat and success in gaining national benefit from nuclear energy would require a different way of doing things.

So, the response was the United States Atomic Energy Act of 1946.

For over 30 years the Joint Committee this act set up provided bi-partisan solutions broadly supported and widely credited with bringing unity of effort to many multiple complex activities.

We are in need of such dramatic progress in how the nation leverages Information Technology that a similar approach may be required today. Consider, for example, some of the capabilities and powers of the Joint Committee on Atomic Energy (JCAE). The JCAE oversaw 100% of the executive branch’s involvement in atomic energy and nuclear weapons, and provided the legislative framework governing research into nuclear science throughout the country. Here is some additional important/relevant context to consider (from Wikipedia):

The Joint Committee on Atomic Energy (JCAE) was a United States congressional committee that was tasked with exclusive jurisdiction over “all bills, resolutions, and other matters” related to civilian and military aspects of nuclear power from 1946 through 1977. It was established by the United States Atomic Energy Act of 1946, and was the overseer of the United States Atomic Energy Commission. For its broad powers, it is described as one of the most powerful congressional committees in U.S. history. It was the only permanent joint committee in modern times to have legislative authority.

The panel coupled these legislative powers with exclusive access to the information upon which its highly secretive deliberations were based. The joint committee was also entitled by statute to be kept “fully and currently informed” of all commission activities and vigorously exercised that statutory right, demanding information and attention from the executive branch in a fashion that arguably has no equivalent today.

One major power wielded by the JCAE was the “Legislative Veto.” This unique power enabled the JCAE to influence policy decisions while matters were pending. This enabled the JCAE to act as a co-decision maker with the executive branch rather than only providing congressional oversight of actions that had already occurred. The legislative veto power was later found to be unconstitutional by the United States Supreme Court in 1983.

During the 1970s, the committee’s role in shaping nuclear policy began to diminish after the Nuclear Regulatory Commission was created to replace the Atomic EnergyCommission. Congress soon transferred the bulk of the joint committee’s jurisdiction over civilian nuclear power to other standing congressional committees in the House and Senate. The joint committee was finally abolished on August 5, 1977.

I’m hoping you find that information important background as you think through the right structures our nation should put into place to help us deal with the modern world of interconnected Information Technology.

So lets continue with the analogy for a moment.

Like in the early days of the nuclear age, today we face both a challenge and an opportunity.

The challenge is one most today call the cyber threat, which is huge, and growing, and hard for humans to realize and mentally deal with (see this on Cyber Threat Amnesia). The opportunity is one many today call the IT revolution, but others call web2.0, gov2.0, or just the optimized benefits of the information age. This IT revolution includes the wave of capabilities under the broad umbrella of Artificial Intelligence, something the nation really needs to get right.

In both response to the threat and the ability to reap the benefits of IT we are lacking as a nation. Regarding the threat: Criminals violate the personal privacy of our citizens through cyber snooping and attacks, organizations steal corporate intellectual property (which hurts in our ability to create jobs and value), terrorists gain advantage through use of IT, and nation states conduct espionage stealing our secrets. Cyber crime costs billions of dollars, perhaps trillions. And every logical strategy, technology and technique tried by the executive branch and smart industry leaders has fallen short. Something else must be done to address the cyber threat.

Our IT infrastructures and capabilities are known to produce benefits for our economy, but clearly we are sub optimized in our current approach. Our schools still teach the old way with almost no benefits from new technology. Most students have no more than a working knowledge of computers. And we turn out too few who can master IT. Economically, we have great unrealized potential in using IT to enable job growth and economic benefits while reducing cost of healthcare, cost of living and cost of education. Smart IT can also reduce cost of business and reduce the cost of goods to consumers. In the federal government, IT helps serve citizens but CIOs and CTOs struggle agency by agency to deliver value. Trends in “Big Data” and AI approaches to making sense over data hold great promise, but there are not coherent government-wide policies that can optimize these sensemaking activities. And multiple committees in both houses of congress try to exercise oversight over agencies and programs, but the federal enterprises have a mixed record of being able to deliver on the promise of IT. Meanwhile China seems to be way ahead of us in key infrastructure areas like roll-out of IPv6 and 5G. And although there are great areas of progress being made in domains like commercial Internet from space, much of that seems

But if we keep doing things the same old way, we are going to get the same old results, don’t you think?

Maybe what we need is a better framework of laws, a smarter ability to learn from and interact with our nation’s IT industry, and a smarter way to learn from and respond to our citizens. And maybe what we need is a smarter way to interact with nation’s globally. And maybe what we need is a better way to enable protection for our citizens, enhance training for our students, and enable all elements of our economy to achieve more through more powerful IT.

So, one option, by analogy:

United States Congress Permanent Joint Committee on Information Technology.

The basic concept is that Congress must do something dramatically different if it is to expect different results.  So must the executive branch.

Is a permanent joint committee on IT the right answer?  At this point it is hard to imagine that it could hurt.

Any thoughts about this recommendation?

 

Other related topics:

The IBM Press Release on Spark That Every Tech Leader Should Read

IBM just announced a major new push around Apache Spark. You know Spark, the free and open source complement to Apache Hadoop that gives enterprises better ability to field fast, unified applications that combine multiple workloads, including streaming over all your data. For years it has seemed like IBM was giving lip-service to Spark while emphasizing capabilities that they placed big bets on over the years (especially IBM’s flagship stream processing product, InfoSphere Streams).

I have seen solutions based around InfoSphere Streams that are clearly the right approach for high performance solutions where reliability is critical for mission support. Spark is still new and frankly there have been issues with performance from time to time. But Spark is also open source where large teams of developers are contributing to continuously improve the capability. Spark today is production ready for many workloads.

But I never would have imagined IBM would so strongly endorse Spark like they did today. I was really surprised. Their endorsement is so strong I believe it is time for all InfoSphere Streams users start considering the future of their designs.

The endorsement came in the form of a $300 million investment and the assignment of 3,500 people to help develop Spark. They also launched a plan to train over a million data scientists and data engineers on Spark. IBM called spark “the most significant open source project of the next decade.”

Full press release follows:

IBM Announces Major Commitment to Advance Apache®Spark™, Calling it Potentially the Most Significant Open Source Project of the Next Decade

BM Joins Spark Community, Plans to Educate More Than 1 Million Data Scientists

ARMONK, NY – 15 Jun 2015: IBM (NYSE:IBM) today announced a major commitment to Apache®Spark™, potentially the most important new open source project in a decade that is being defined by data. At the core of this commitment, IBM plans to embed Spark into its industry-leading Analytics and Commerce platforms, and to offer Spark as a service on IBM Cloud. IBM will also put more than 3,500 IBM researchers and developers to work on Spark-related projects at more than a dozen labs worldwide; donate its breakthrough IBM SystemML machine learning technology to the Spark open source ecosystem; and educate more than one million data scientists and data engineers on Spark.

As data and analytics are embedded into the fabric of business and society –from popular apps to the Internet of Things (IoT) –Spark brings essential advances to large-scale data processing. First, it dramatically improves the performance of data dependent apps. Second, it radically simplifies the process of developing intelligent apps, which are fueled by data.

To further accelerate open source innovation for the Spark ecosystem, IBM is taking the following actions:

  • IBM will build Spark into the core of the company’s analytics and commerce platforms.
  • IBM’s Watson Health Cloud will leverage Spark as a key underpinning for its insight platform, helping to deliver faster time to value for medical providers and researchers as they access new analytics around population health data.
  • IBM will open source its breakthrough IBM SystemML machine learning technology and collaborate with Databricks to advance Spark’s machine learning capabilities.
  • IBM will offer Spark as a Cloud service on IBM Bluemix to make it possible for app developers to quickly load data, model it, and derive the predictive artifact to use in their app.
  • IBM will commit more than 3,500 researchers and developers to work on Spark-related projects at more than a dozen labs worldwide, and open a Spark Technology Center in San Francisco for the Data Science and Developer community to foster design-led innovation in intelligent applications.
  • IBM will educate more than 1 million data scientists and data engineers on Spark through extensive partnerships with AMPLab, DataCamp, MetiStream, Galvanize and Big Data University MOOC.

“IBM has been a decades long leader in open source innovation. We believe strongly in the power of open source as the basis to build value for clients, and are fully committed to Spark as a foundational technology platform for accelerating innovation and driving analytics across every business in a fundamental way,” said Beth Smith, General Manager, Analytics Platform, IBM Analytics. “Our clients will benefit as we help them embrace Spark to advance their own data strategies to drive business transformation and competitive differentiation.”

Spark Drives Business Transformation for IBM Clients

Spark has grown quickly in popularity among developers and data scientists as an essential platform for helping organizations more easily integrate Big Data into applications, and is quickly gaining momentum with IBM clients looking to transform business decision-making:

  • Real-time transportation planning software from Optibus is changing the way public transport is organized. “Spark, together with IBM, provides a highly scalable platform for Optibus, making it easy for us to expand our software as a service offering into new markets, and helps us simplify deployment, maintenance and application development for transportation companies worldwide,” said Amos Haggiag, Optibus CTO and Co-Founder.
  • Findability Sciences, a global consulting and contextual data technology solutions company, is using IBM Analytics and Spark to help clients tap into the power of Big Data. “Apache Spark with IBM BigInsights has given us tremendous capacity for our implementations for small and medium businesses, where MapReduce was not efficient. With Spark, the performance has improved multi fold. We’re now able to process streaming data from IoT devices and offer analytics for data in motion for things like traffic, commuters and parking,”said Anand Mahurkar, CEO of Findability Sciences.
  • Independence Blue Cross (IBC) is the largest health insurer in the Philadelphia area, serving more than two million people in the region and seven million nationwide. It’s using Spark to help drive product innovation and develop new services. “Apache Spark is quickly maturing into a power tool for development of machine-learning analytic applications. It allows our IBC researchers and academic partners to work together more seamlessly, which means we can get new claims and benefits apps up and out to customers much faster,” said Darwin Leung, Director of Informatics at Independence Blue Cross.
  • IBM, NASA, and the SETI Institute are collaborating to analyze terabytes of complex deep space radio signals using Spark’s machine learning capabilities in a hunt for patterns that might betray the presence of intelligent extraterrestrial life. “With Spark as a Service on Bluemix, we’ll be able to work with IBM to develop promising new ways to analyze signal data as we hunt for evidence of intelligence elsewhere in the cosmos. This is an exciting example of synergy in the service of science,”said Dr. Seth Shostak, Senior Astronomer and Director of the Center for SETI Research.

IBM is one of four founding members of the UC Berkeley AMPLab, where Spark was first invented in 2009, and as a result participates in multi-day research retreats, provides advice and real-world insight, and interacts closely with AMPLab researchers on projects of mutual interest. “As a sponsor of the AMPLab, IBM contributes to the greater Spark community and provides guidance for the continued evolution and improvement of the Berkeley Data Analytics Stack, the open source platform of which Spark is a key component,” said Professor Michael Franklin, Director of the UC Berkeley AMPLab.

Spark is agile, fast and easy to use. And because it is open source, it is improved continuously by a worldwide community. Over the course of the next few months, IBM scientists and engineers will work with the Apache Spark open community to rapidly accelerate access to advanced machine learning capabilities and help drive speed-to-innovation in the development of smart business apps. By contributing SystemML, IBM will help data scientists iterate faster to address the changing needs of business and to enable a growing ecosystem of app developers to apply deep intelligence into every thing.

We track IBM as a Tech Titan in the CTOvision Solutions Directory

Examining New Mission-Focused Capabilities Coming From The Cloudera And Intel Engineering Partnership

The video at this link and embedded below captures the content and dialog of a webinar which examined new capabilities of Cloudera and Intel, with a focus on capabilities that provide a full stack solution to many key enterprise mission needs. The webinar included insights by Cloudera’s Senior Director of Technology Webster Mudge and Intel’s Enterprise Technology Specialist Ed Herold, plus questions from an informed audience. Results of the recent CTOlabs.com white paper on this topic were also presented.

 

https://www.youtube.com/watch?v=0KgxCb2X_Bo

This information can inform your design trades and is relevant to enterprise architects, engineers and line of business leaders.

We would love to get you feedback on the webinar video and/or white paper. Please contact us with your thoughts.

We track Cloudera in our list of Big Data disrupters.

We track Intel as a Tech Titan

What I Took Away From The Operation Cleaver (#OpCleaver) report

If you track cyber security you have no doubt heard of the recently published report by Cylance titled Operation Cleaver. It has been extensively referenced in the press and has generated significant dialog among practitioners, pundits and policy wonks including on Twitter with the hashtag #OpCleaver. The report was so good and so well documented it resulted in the FBI taking the action of publishing special alerts warning infrastructure providers of possible Iranian cyber attacks. This was a very important report.

Here is a gist of the report from Cylance:

  • A new global cyber power has emerged; one that has already compromised some of the world’s most critical infrastructure. The Operation Cleaver report sheds light on the efforts of a coordinated and determined group working to undermine the security of at least 50 companies across 15 industries in 16 countries. Our report unveils the tactics, techniques and procedures used in what is still an ongoing campaign.
  • Operation Cleaver has, over the past several years, conducted a significant global surveillance and infiltration campaign. To date it has successfully evaded detection by existing security technologies. The group successfully leveraged both publicly available and customized tools to attack and compromise targets around the globe, including military, oil and gas, energy and utilities, transportation, hospitals, telecommunications, technology, education, aerospace, defense contractors, chemical, companies, and governments.
  • Since at least 2012, Iranian actors have directly attacked, established persistence in, and extracted highly sensitive materials from the networks of government agencies and major critical infrastructure companies in the following countries: Canada, China, England, France, Germany, India, Israel, Kuwait, Mexico, Pakistan, Qatar, Saudi Arabia, South Korea, Turkey, United Arab Emirates, and the United States.

The report provides a sound-bite sized statement that “Iran is the new China.”  That is designed to make us think and I’m glad they wrote that. But as an intelligence professional I would like to add that the motivations of these actors appear to be different. China seems primarily motivated by espionage, with the strategic military potential of cyber attacks a secondary but also important consideration. These Iranian attacks appear to be more sinister, motivated by a desire to have a strategic weapon at their disposal. The importance of this nuance may only be relevant to policy makers seeking to deter these actors from their objectives. That too is something to put some thought into, since both are totally different collectives of totally different actors.

The report makes the point that in many ways attribution offers little real benefit to the day-to-day cyber defender. Cylance writes that this level of attribution can aid law enforcement. We agree with the latter point, of course, this can be of use to law enforcement. But would like that there is another school of thought regarding intelligence informing cyber defense. We believe this report can serve enterprises as yet another strategic intelligence input, which can be useful in helping organizations plan their defenses.

Overall, our assessment is that although the report is short, it is to the point, and very insightful. Our recommendations:

  • We most strongly recommend you read it in its entirety.  It will give you a much better feel for the quality of work by the team at Cylance and help you understand the nature of this threat better.
  • Please consider sharing the Cylance report. Cylance has documented a very important evolution of the cyber threat, one we believe all citizens, not just defenders, need to better understand. I believe we are all doing civilization a favor when we spread the word on good works like this, and hope you will consider sharing the Cylance Operation Cleaver report widely.

Download the report here: Operation Cleaver

Additional Reporting

Russian State-Sponsored Cyber Actors Targeting Network Infrastructure Devices

The Cyber Threat Provides New Insights Into Bad Actors: Book updated with latest on threat actors and the tech ecosystem

NIST Issues Draft Guide To Cyber Threat Information Sharing

I love and respect NIST and I just want to come right out with that so you know where I am coming from. Now add on top of that the fact that they have just issued a draft document that discusses items at the intersection of three of my passions, Cyber Security, Technology and Intelligence, and you can see why I am so excited.  So, with my bias in mind, I report the following:

NIST has just produced a draft special publication that I believe is the best thing I have ever read from their organization. The document is SP 800-150, the Guide to Cyber Threat Information Sharing.

This is a draft released for public comment. Expect changes in the final version. But this is ready for your review right now. If you are a CIO, CISO, CTO or other enterprise IT professional you will learn lessons and gain insights into approaches that can help you enhance your ability to create, acquire, process, share and act on cyber threat intelligence. It is well worth reviewing now, even while it is in draft.

As a draft, comments are being solicited, and I already have a few minor ones I’ll be suggesting for NIST consideration. For example, I do not like the way they bestow credit upon one particular integrator who rushed out and trademarked a term that had been in use in the community for decades. I’m going to work to ensure that is put in a community-focused light. I am going to suggest a tiny bit more information on some key technical standards for information sharing. Although I love the reference to standards on the last page, I’m thinking a paragraph or two on OVAL, SCAP, STIX, TAXII and VERIS could be helpful to enterprise IT professionals.

But those are minor suggestions. Overall I found this to be a fantastic document that I believe can make a positive contribution to enterprise threat information sharing right now.

To read more see: NIST SP 800-150

More reading:

NIST report on IoT security raises awareness on risks of connected devices

CTOvision Guide To The Cybersecurity Technology Marketplace

 

 

More Content

Cyber War

SciFi

Super Bowl Ads Indicate Big Businesses Think You Are Afraid of AI

Tom Loftus provided an insightful review of some of Super Bowl ads in the 4 Feb 2019 Wall Street Journal. Like AI parody in SNL, these ads really poked fun at computers: Seriously, did anyone catch the commercials? If the Super Bowl is the zeitgeist, then it is safe to say that America is not […]

HBO’s Westworld: The Man In Black is a special kind of Twitter user

HBO’s Westworld is a modern take on the Michael Crichton SciFi tale of a robotic amusement park. The HBO version has a new twist. The creators/writers were all exposed to years of Twitter, which has influenced every episode and the entire arch of two seasons of the show. Now that season two is wrapping up, […]