Maida: Playbook automation speeds up alerts without improving threat intelligence
Liz Maida · Graph Theory and Cybersecurity Data // Liz Maida, Uplevel Security (FirstMark's Data Driven) · Jul 13, 2017 · at 6:43
Liz Maida, Founder and CEO of Uplevel Security, critiques automated security playbooks for focusing on workflow speed rather than threat intelligence.
0:00 / 0:09exact quote · 9.2s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“That's not actually solving the underlying problem, right? You might be processing alerts faster, but you're not getting any smarter or learning more about the attacks that you've seen.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Liz Maida
Maida: Security teams average 16 hours investigating potentially malicious emails
“On average it can take them 16 hours to investigate a potentially malicious email.”
Liz Maida: Cybersecurity is an ideal use case for graph data structures
“Cybersecurity in many ways is almost the absolute ideal use case for a graph data structure.”
Maida: The average large organization uses over 40 cybersecurity vendors
“So, on average, the average large organization has over 40 security vendors between their network analysis and things that are installed on their endpoints, and all of those security devices are actually generating alerts.”
Maida: Over 90% of enterprise cybersecurity data goes completely unused
“There's far too much data, and actually the majority of it, you know, greater than 90%, Isn't actually used at all.”
Maida: Cybersecurity analysts waste significant time on manual copy-paste queries
“The gap in the technology that they have today means that that's not how they're actually spending a lot of their time. Like a lot of their time is actually copying and pasting things to see if they're on a known bad list or running who is queries and the like…”
Maida: Graph databases excel at relationships but struggle with metadata and counts
“While the graph databases are really efficient and really good at storing the relationships between the various entities, they are not as good at doing things like storing additional metadata or quickly retrieving counts and the like.”