Overcoming Too Much Data

Gathering Intelligence and Containing Exposure
Most organizations have more data than they know what to do with, much less understand how they can use that data in a meaningful way, say NopSec's Lisa Xu and Steven Leonard. Having the ability to aggregate that data is key.

Unfortunately, most organizations are more concerned about filling security gaps than they are in compiling and understanding the data they have to enhance fraud prevention, says Leonard, chief marketing officer of NopSec. Most chief information security officers are asking: "How can you get the intelligence out of it?" he says.

But with artificial intelligence, CISOs can overcome many of their challenges, says Lisa Xu, NopSec's managing director. "There are two key types of rules built into the artificial intelligence expert system," she says. "One is [based on] security rules, to find out which holes are really exposed and if they are exploitable or not; the other one is really built into the business rules, because the customer knows their environment, and the same vulnerability that resides on the domain control clearly is more important than [the vulnerability that resides] on the desktop."

During this interview, Leonard and Xu discuss:

  • The challenge big data poses for mobile device exposure;
  • How distributed-denial-of-service attacks connect to big data;
  • Why normalizing and aggregating data ensures security gaps are filled.

At NopSec, Leonard is responsible for all areas of marketing strategy and execution. His team helps customers holistically manage IT security vulnerabilities for applications and infrastructure, on-premises and in the cloud.

As managing director, Xu is responsible for NopSec's strategic direction, investor relations, financial management, human resources, sales and operations. Before joining NopSec, Xu advised Fortune500 enterprises about data security, privacy and technology risk management. She started her career as a management consultant at Accenture (Andersen Consulting) and led many diverse teams at Ally Financial (GMAC), KPMG and Blue Cross Blue Shield. Xu also is a charter holder of CFA, Chartered Alternative Investment Analyst, and is a certified information system auditor.

Additional Summit Insight:
Hear from more industry influencers, earn CPE credits, and network with leaders of technology at our global events. Learn more at our Fraud & Breach Prevention Events site.

Around the Network

Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing ffiec.bankinfosecurity.com, you agree to our use of cookies.