Data Lake + Analysis Algorithm + Unified GUI = Future of InfoSec Products

Source: Splunk Buys Security Startup Caspida For $190M | TechCrunch

This is interesting, and it supports my view of where things are going:

1. Companies will have their own internal data lake

2. Instead of selling their own data import and data lake and capture tools, (or even GUI’s after some point), security vendors will just be selling the secret sauce algorithms that produce better results

As I wrote about here after RSA 2015, the security analysis vendors and the business intelligence vendors have already started merging, and that is only going to accelerate.

We’re moving towards one data lake per company, with granular event type spigots each having their own authz and authn capabilities. And of course we’re already trying to bring the UI’s into unified dashboards.

So the data lake is consolidated and internal, the dashboards are unified, so that just leaves algorithms. That’s what the vendors will be–providers of data analysis algorithms that produce slightly better results that come from a standardized data lake and go into a standardized UI.

Related posts:

1. The Real Internet of Things: Details and Examples

2. Day-1 Skills That Cybersecurity Hiring Managers Are Looking For

3. It’s Time for Vendor Security 2.0