Content by Varun Haran

Convergence of OT and IoT: The Security Challenges

Varun Haran  •  August 21, 2018

Upcoming enterprise IoT ecosystems and conventional OT networks share similar security challenges, and as the two converge, organizations need to re-evaluate core security processes, says Richard Bussiere of Tenable Network Security.

Securing Multicloud Environments

Varun Haran  •  August 21, 2018

The growing use of multiple cloud services in enterprises is creating new security challenges, says Cisco's Harry Dogan, who shares common mistakes and fixes.

GRC in Current Threat Landscape: Identifying New Metrics

Varun Haran  •  August 21, 2018

Regulatory compliance and technology innovation are making security more complex, so organizations need to look beyond technical base measures for metrics, says SAI Global's Andrew Bissett.

Planning for the Shifting Threat Landscape

Varun Haran  •  August 17, 2018

The best way to take a holistic approach to the current threat landscape is to define security issues as business problems and then put the problem before the solution - not the other way around, contends RSA CTO Zulfikar Ramzan.

Fighting Sandbox-Evading Malware

Varun Haran  •  August 17, 2018

Malware detection needs to shift to detecting anomalous behavior, rather than depending on signature-based detection technologies to deal with such threats as sandbox-evading malware, says Verizon's Ashish Thapar.

Growing IT-OT Integration: Addressing the Risks It Brings

Varun Haran  •  August 17, 2018

While IT and OT integration has brought about new levels of operational efficiency, it has also introduced serious cyber risks that conventional IT security approaches might fail to address, says IBM Security's Paul Garvey.

What Does 'Threat Analytics' Really Mean?

Varun Haran  •  August 17, 2018

Threat analytics involves understanding where threats to key data assets exist and planning your mitigation strategy around that, says Skybox's Gerry Sillars.

Analysis: Updates to STIX, TAXII Standards

Varun Haran  •  August 16, 2018

The STIX and TAXII standards for threat intel interchange have undergone a major upgrade to v2.0. LookingGlass CTO Allan Thomson, who's been closely involved in its development, describes the role of these enhanced standards.

Why Automation Is Essential to Cloud Security

Varun Haran  •  August 16, 2018

Because of the lack of specialists with the skills needed to run security operations in the cloud, intelligent automation is essential, says Microsoft's Diana Kelley.

OT Security and the Threat of Disruption

Varun Haran  •  August 16, 2018

Disruption to operational technology can cause business downtime as well as serious public safety issues, so a nuanced approach to cybersecurity is essential, says Obbe Knoop of Nozomi Networks.

Blockchain Use Cases in Cybersecurity

Varun Haran  •  August 16, 2018

A number of innovative applications of blockchain technology for security are emerging, but Laurence Pitt of Juniper Networks warns that not all data is suitable for storage in a blockchain.

Cloud Security: Beyond CASB

Varun Haran  •  August 16, 2018

Cloud access security brokers are not a panacea for all cloud security problems, says Oracle's Amit Zavery, who advocates an end-to-end approach.

Leveraging DevOps to Achieve 'Built-in' Security

Varun Haran  •  August 15, 2018

Achieving built-in, rather than bolted-on security at the DevOps stage through transparent orchestration is the new mantra for building resilient systems and software, says Sumedh Thakar of Qualys.

Will AI and ML Make Security Cheaper?

Varun Haran  •  August 14, 2018

Artificial intelligence and machine learning will have a significant impact on lowering the cost of securing an organization because it will reduce the need for advanced skillsets, predicts Rapid7's Richard Moseley.

The Public Cloud: Understanding Shared Responsibility Model

Varun Haran  •  August 9, 2018

Securing the public cloud is not as challenging as it used to be, but too many organizations are still taking the wrong approach, says Microsoft's Jonathan Trull. Understanding the shared responsibility model for security is critical, he says.