HP unveiled new security offerings to help organizations embrace a “New School of Cyber Defense” by protecting the interactions between users, applications, and the boundless data exchanged to safely fuel growth and innovation. As information flows through data centers to the cloud and out to personal devices, the data must be secured at every step. The new HP Security products and services announced today address this approach to security incorporating user behavior analytics, data-centric cloud access protection, mobile application reputation analysis, contextual threat intelligence sharing, and incident response.
Organizations worldwide spent approximately $77 billion on cyber security in 2014,1 while successful breaches increased 25 percent.2 Adversaries continue to evolve while organizations increasingly adopt new ways of doing business—and the current approach to securing interactions between users, applications and data isn’t keeping up.
This calls for a new approach to cyber defense. Building on security fundamentals such as monitoring events and securing the perimeter, organizations must shift their focus to protecting what matters most – the interaction between the users, the applications and the data that carry the sensitive information adversaries target.
“The old school approach to cyber security focused on securing the perimeter, but the data powering business today goes beyond our four walls and must be protected from cyber threats regardless of where it resides,” said Jyoti Prakash, Country Director, India and SAARC countries, HP Enterprise Security Products. “In today’s environment, we must challenge ourselves to embrace the new school of thinking that goes beyond the infrastructure to protect what matters most – the interactions between users, applications and data that when protected, can fuel our businesses and accelerate growth.”
Tackling Insider Threats through Behavioral Analytics
HP announced a new offering that gives companies visibility into user behavior, delivering a simple, efficient way to detect malicious users within the enterprise. Partnering with security analytics company Securonix to deliver an interoperable security intelligence offering designed to help track and identify the “enemy within,” HP ArcSight User Behavior Analytics (UBA) leverages the behavioral data generated by enterprise users along with broader network event intelligence to detect even the most complex threats.
Extending Cloud Data-Centric Security
HP announced a new cloud access security platform designed to complement the existing HP Atalla cloud security portfolio, and expand its leadership in data-centric security. The new HP Cloud Access Security Protection platform provides ‘borderless’ protection of the data itself—at rest, in use or in motion—through a partnership with cloud access security broker Adallom to bring enhanced cloud security monitoring, governance and control capabilities to HP customers. The platform integrates HP’s existing suite of data security offerings including HP Atalla Information Protection and Control (IPC), an added-value security solution that automatically encrypts files when moving information in and out of the cloud or across platforms.
Empowering BYOD through Mobile Application Protection
HP announced a new offering to help its customers manage their Bring-Your-Own-Device (BYOD) policies more intelligently by providing a fully-integrated mobile application reputation database within the HP Fortify on Demand cloud-based portal. To further protect the interactions between users, data and the applications, all HP Fortify on Demand customers can now request free reputation and behavioral analysis of company-owned applications or those found in major app stores worldwide.
Going Beyond Threat Intelligence Sharing
Perhaps one of the best weapons in a company’s security defense arsenal is collaboration. Because information sharing is intrinsic to a comprehensive security strategy, HP Security has developed HP Threat Central, which is now generally available for all customers. Delivering automated and open sharing of information, HP Threat Central offers contextual analysis of information, prioritization of security data and identification of results that will allow organizations to take action. In addition to value-added intelligence, analysis of underground forums and threat actor profiling from HP Security Research, HP Security is also working to augment the HP Threat Central service with intelligence feeds from a network of companies, including AlienVault and Crowdstrike.
Addressing Incident Response and Advanced Threat Detection
HP Security is focused on building a comprehensive set of best-in-class security offerings to deliver unparalleled global access to a comprehensive suite of security remediation services. In line with this mission, HP Security and FireEye today announced a partnership that will deliver incident response offerings and develop an industry standard reference architecture providing customers with a blueprint for advanced threat protection services and incident response capabilities.
This partnership offers customers choice, and supports HP’s overall strategy to deliver world class security capabilities. These capabilities draw on investments in industry-leading solutions from HP ArcSight, HP Atalla, HP Fortify, HP TippingPoint and HP Security Voltage along with partnerships with industry-leaders such as Adallom, Securonix and Trend Micro. Together, these solutions help customers address security strategies in line with the “New School of Cyber Defense”.