This contains promotional content. Learn more.
A Their Story Podcast with Sean Martin and Marco Ciappelli
Guest: Erik Thoen, VP Product Management
The organization telling us their story today is ReversingLabs.
Listen to Chapter 1 | Listen to Chapter 2
Not A Crystal Ball But A Glass Box To Keep You Safe | A ReversingLabs Story | #3
The last time we got together with ReversingLabs was during RSA Conference San Francisco 2020. Back then, we spoke with Mario Vuksan And Tyson Whitten to learn about how the black box of machine learning and artificial intelligence is giving InfoSec professionals a few headaches. A lot has remained the same on this front. Still, a lot has changed since then for many organizations’ SOC teams: work from home environments, disruptive digital and business transformation, rapid cloud deployments, and the ever-dreaded “do more with less budget” operational tactic — to mention just a few.
These changes didn’t make yesterday’s problem go away. It’s more likely that these many forced changes have created numerous new sets of issues piled on top of the old ones in the SOC room such as increased exposure to new threats and increased attack surfaces and activities — all combined with either a lack of visibility into how new technologies deployed to the infrastructure work or over-visibility with too much data to understand.
Thankfully, there is a bright side, an alternative path, a yellow brick road to a place where these problems can be managed. That path is enabled through adaptability, resiliency, and explainability — giving the SOC teams the ability to efficiently identify, investigate, and respond to file-based threats and attacks that would otherwise require lengthy investigations or result in events and incidents dropped on the cutting room floor.
It can be summed up by the basic, yet powerful, concept of transparency.
The black box can be turned into a transparent box that allows us to make better decisions, educated calls, and establish better routes to follow.
We are not saying that it is a magic crystal ball that gives the team all of the answers — in reality, do you want that anyway? What you need is transparency that allows you to pick and scan a file, any file, regardless of where it originates, where it is headed, and what the user and systems need to do with it. Transparency will give you the help you need to make an educated decision.
Transparency is the path to explainable intelligence — the path to better information security. There is no wizard of Oz — didn’t you hear the news?
