Analyzing an organization's vulnerability footprint from an adversary's perspective can enable proactive detection and efficient mitigation of cyber threats
Deloitte Advisory Cyber Risk Services and Cray Inc. (Nasdaq: CRAY), the global supercomputing leader, introduced today the first commercially available high-speed, supercomputing threat analytics service, Cyber Reconnaissance and Analytics. The subscription-based offering is designed to help organizations effectively discover, understand and take action to defend against cyber adversaries.
The threat intelligence reports generated through this service are already enabling clients, including the Department of Defense, to focus remediation teams by providing detailed, actionable information on potential threat vectors and identifying specific flows, network locations, times and events. "We are leveraging Deloitte Advisory's Cyber Reconnaissance service to enable large scale cyber data analytics to more proactively defend our networks and support critical national missions," said Clayton Jones, USPACOM J6 Senior Advisor and Strategic Cyber Integrator.
"What do you look like to your adversary?" commented Deborah Golden, federal cyber risk services leader for Deloitte Advisory and principal at Deloitte & Touche LLP. "Instead of reviewing every component of an agency's internal enterprise, we are trying to show what the adversary sees in order to give an organization a true 'risk profile.' This includes the ability to effectively prioritize internal budgets and resources, and facilitate a realistic approach toward assessing network defense effectiveness."
The Cyber Reconnaissance and Analytics service is powered by the Cray® Urika®-GX system – Cray's new agile analytics platform that fuses the Company's supercomputing technologies with an open, enterprise-ready software framework for big data analytics. The Cray Urika-GX system gives customers unprecedented versatility for running multiple analytics workloads concurrently on a single platform that exploits the speed of a Cray supercomputer.
By changing the perspective, increasing the volume of data and applying advanced analytics, an organization can have a clearer view of true risk, exposure and malicious activity. This vantage point provides potential weaknesses, vulnerabilities and threat vectors that may highlight risks involving anomalous activities.
"Defending against sophisticated and evolving threats is an analytics problem squarely at the crossroads of big data and supercomputing," said Barry Bolding, chief strategy officer at Cray. "This combination of Cray's analytics platform and Deloitte Advisory's threat risk management service is a formidable solution in the war on cyber-threats. Additionally, for the first time, customers can now utilize the power and capabilities of a Cray solution as-a-service."
Big data, cloud computing and highly-distributed enterprises are also impacting the threat landscape; and greatly increasing an enterprise's potential surface area for attackers to compromise. Dynamic interconnections among entities (e.g., third parties, customers and the public) encourage free flow of data where the "system boundaries" are often beyond an agency's or organization's (physical) walls. Data is generated and stored at a much faster rate than it can be analyzed, leaving open opportunities for malicious content to hide and maneuver undetected.
"Teaming with Cray was a clear choice and allows for versatility combined with speed to tackle big data problems," said Gordon Hannah, cyber reconnaissance and analytics leader for Deloitte Advisory cyber risk services and principal at Deloitte & Touche LLP. "Cyber analytics is about leveraging efficiencies and joining bits of knowledge together. With Cyber Reconnaissance, we utilize graph analytics to identify relationships and look for behavioral patterns versus querying for a known signature. Few solutions available today give customers the ability to have such high frequency insights."
Global supercomputing leader Cray Inc. (Nasdaq: CRAY) provides innovative systems and solutions enabling scientists and engineers in industry, academia and government to meet existing and future simulation and analytics challenges. Leveraging more than 40 years of experience in developing and servicing the world's most advanced supercomputers, Cray offers a comprehensive portfolio of supercomputers and big data storage and analytics solutions delivering unrivaled performance, efficiency and scalability. Cray's Adaptive Supercomputing vision is focused on delivering innovative next-generation products that integrate diverse processing technologies into a unified architecture, allowing customers to meet the market's continued demand for realized performance. Go to www.cray.com for more information.
About Deloitte Advisory Cyber Risk Services
Deloitte Advisory's cyber risk services help complex organizations more confidently leverage advanced technologies to achieve their strategic growth, innovation and performance objectives through proactive management of the associated cyber risks. With deep experience across a broad range of industries, Deloitte Advisory's more than 3,000 cyber risk services practitioners provide advisory and implementation services, spanning executive and technical functions, to help transform legacy IT security programs into proactive, secure, vigilant and resilient cyber risk programs. Deloitte Advisory cyber risk services works with our clients worldwide to better align cybersecurity investments with strategic business priorities, establish improved threat awareness and visibility, and strengthen the ability of organizations to thrive in the face of cyber incidents.
About Deloitte Advisory
Deloitte Advisory helps organizations turn critical and complex business issues into opportunities for growth, resilience and long-term advantage. Our market-leading teams help our clients manage strategic, financial, operational, technological and regulatory risk to enhance enterprise value, while our experience in mergers and acquisitions, fraud, litigation and reorganizations helps clients emerge stronger and more resilient.
As used in this document, "Deloitte Advisory" means Deloitte & Touche LLP, which provides audit and enterprise risk services; Deloitte Financial Advisory Services LLP, which provides forensic, dispute, and other consulting services; and its affiliate, Deloitte Transactions and Business Analytics LLP, which provides a wide range of advisory and analytics services. Deloitte Transactions and Business Analytics LLP is not a certified public accounting firm. These entities are separate subsidiaries of Deloitte LLP. Please see www.deloitte.com/us/aboutfor a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Certain services may not be available to attest clients under the rules and regulations of public accounting.