Menu
Cybersecurity firms step up intel sharing despite issues of trust

Cybersecurity firms step up intel sharing despite issues of trust

The collaboration has been protecting companies from the latest cyber attacks

The war against cybercriminals won’t be won alone. To keep hackers at bay, security vendors are establishing more ways for their customers to cooperate and share data about the latest threats -- even as it sparks concerns about trust and competition.

“We have to win this war together,” said Ben Johnson, chief security strategist of Carbon Black.

The company is the latest to help pool together security expertise with a new platform called the Detection eXchange.

Carbon Black protects the networks of thousands of companies, and it's now opening a line of communication between them. More than a virus signature or an IP address, the exchange aims to foster the sharing of "patterns of attack," which identify behaviors and tactics employed by malicious hackers.

That can be valuable knowledge, Carbon Black says, because those patterns are harder for hackers to quickly change than something like an IP address.

Although CISA has raised concerns about privacy, because the government will be the clearing house for data that gets shared, security vendors say collaborating on intelligence can help their clients prevent the next cyberattacks.

Palo Alto Networks is another vendor trying to build a culture of cooperation. The industry has been focused on protecting data, but it needs to share it too, said the company’s chief security officer, Rick Howard.

In 2014, Palo Alto Networks joined with rivals including Fortinet, Intel Security and Symantec to form the Cyber Threat Alliance. The vendors are each sharing around 1,000 malware samples each day and using that data to bolster their security products.

The alliance is still small, with only about eight members, but Howard believes it will be a “game changer” if the group can expand to 50.

Eventually, the alliance aims to have have enough intelligence to keep pace with the latest strategies hackers are using, which will let them move faster in protecting clients.

The collaboration clearly has it benefits, but an alliance in which competing vendors share information that's central to their businesses isn't easy to pull off. 

“When I first started, I gave it a year," Howard said. "I thought, 'There's no way this is going to hold together.'"

But customers like it and regularly encourage the company to expand the cooperation. He's optimistic that it could last. “We had to learn to trust each other, because we don’t like each other,” he jokes.

The intelligence sharing fills gaps in what each security vendor knows. For instance, Palo Alto Networks and Symantec overlap in only about 70 percent of the malware intelligence they share, according to Howard.

The reluctance to share may also be a challenge for Carbon Black. Companies prefer to keep data private and fear revealing too much, Johnson said, which is why contributors can chose to share on its platform anonymously. But he maintains it's useful at a time when IT security talent is scarce.

“Small companies can understand what big companies are seeing and vice-versa,” Johnson said.  “It’s a tremendous benefit.”

Jane Wright, an analyst at Technology Business Research, said Carbon Black’s exchange can act as a “water cooler” where security professionals talk about best practices and incident response. Even so, "sometimes the most valuable sharing just isn’t happening,” she said.

A major fear is that information shared about vulnerabilities or a company's infrastructure may be leaked accidentally to other hackers. But the pros can outweigh the cons. Companies Wright has talked to see the benefits of wider collaboration and even expect it from their vendor. They realize they’re walking a fine line between the risk of sharing too much and potentially stopping the next cyber attack.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Featured

Slideshows

Leading female front runners of the Kiwi ICT industry honoured at 2019 WIICTA

Leading female front runners of the Kiwi ICT industry honoured at 2019 WIICTA

Reseller News has honoured the leading female front runners of the New Zealand ICT industry at the 2019 Women in ICT Awards (WIICTA) in Auckland. The awards recognised standout individuals across six categories, spanning Entrepreneur, Rising Star, Shining Star, Community, Technical and Achievement. Photos by Gino Demeer.

Leading female front runners of the Kiwi ICT industry honoured at 2019 WIICTA
Reseller News kicks off awards season in 2019 with Judges' Lunch

Reseller News kicks off awards season in 2019 with Judges' Lunch

The 2019 Reseller News Innovation Awards has kicked off with the Judges Lunch in Auckland with 70 judges in the voting panel. The awards will reflect the changing dynamics of the channel, recognising excellence across customer value and innovation - spanning start-ups, partners, distributors and vendors. Photos by Christine Wong.

Reseller News kicks off awards season in 2019 with Judges' Lunch
Reseller News welcomes industry figures for 2019 Hall of Fame lunch

Reseller News welcomes industry figures for 2019 Hall of Fame lunch

Reseller News welcomed 2018 inductees - Chris Simpson, Kendra Ross and Phill Patton - to the third running of the Reseller News Hall of Fame lunch, held at the French Cafe in Auckland. The inductees discussed the changing landscape of the technology industry in New Zealand, while outlining ways to attract a new breed of players to the ecosystem. Photos by Gino Demeer.

Reseller News welcomes industry figures for 2019 Hall of Fame lunch
Show Comments