Artificial intelligence (AI)

BeyondTrust, the cyber security company dedicated to preventing privilege misuse, vulnerability management, and stopping unauthorized access, announced the availability of a new book, Asset Attack Vectors:  Building Effective Vulnerability Management Strategies to Protect Organizations. The book, authored by BeyondTrust’s Chief Technology Officer, Morey J. Haber, and Chief Operating Officer, Brad Hibbert, and published by Apress, is focused on how to build an effective vulnerability management strategy to protect an organization’s assets, applications, and data. As published in BeyondTrust’s recent survey, next-generation, transformative technologies such as AI/Machine Learning and IoT, and business processes like DevOps are improving operational efficiencies and cost savings, however, 78 percent of users cite security concerns and acknowledge the vulnerabilities these technologies introduce to their networks. In fact, one in five respondents experienced five or more breaches related to next-generation technologies. In the modern enterprise, everything connected to the network, cloud, and mobile device is a target as the perimeter expands beyond the traditional data center Understanding And Mitigating Vulnerabilities This book details how today’s network environments are dynamic, requiring multiple defenses to mitigate vulnerabilities and exploits and stop data breaches. In the modern enterprise, everything connected to the network, cloud, and mobile device is a target as the perimeter expands beyond the traditional data center. “Today’s attack surfaces are rapidly expanding to include, not only traditional servers and desktops, but also routers, printers, cameras, and other IoT devices,” said Morey J. Haber, Chief Technology Officer at BeyondTrust. “It doesn’t matter whether an organization uses LAN, WAN, cloud, wireless, or even a modern PAN ― savvy criminals have more potential entry points than ever before. To stay ahead of these threats, IT and security leaders must be aware of exposures and understand their potential impact.” SLAs For Vulnerability And Patch Management The book is structured to provide guidance to help organizations build a vulnerability management program fit to meet the challenges of the modern threat environment. Drawing on years of combined experience, the authors detail the latest techniques for threat analysis, risk measurement, and regulatory reporting. Also outlined are practical service level agreements (SLAs) for vulnerability management and patch management. The book contains guidance for readers to: Create comprehensive assessment and risk identification policies and procedures Implement a complete vulnerability management workflow in nine easy steps Understand the implications of active, dormant, and carrier vulnerability states Develop, deploy, and maintain custom and commercial vulnerability management programs Discover the best strategies for vulnerability remediation, mitigation, and removal Automate credentialed scans that leverage least-privilege access principles Asset Protection Strategy Readers will also gain insights from real-world case studies that share successful vulnerability management strategies and reveal potential pitfalls. “Vulnerability management needs to be more than a compliance check box—it should be a foundation of an organization’s cybersecurity strategy,” said Brad Hibbert, Chief Operating Officer at BeyondTrust. “Our hope is the book helps readers get ahead of threats and protect their organizations with an effective asset protection strategy.” Late last year, authors Morey J. Haber and Brad Hibbert released another book, Privileged Attack Vectors: Building Effective Cyber-Defense Strategies to Protect Organizations. The book details the risks associated with poor privilege management, the techniques that hackers and insiders leverage, and the defensive measures that organizations must adopt to protect against a breach, prevent lateral movement, and improve the ability to detect hacker activity and insider threats in order to mitigate cyber risk. 

ExtraHop, global firm in analytics for security and performance management, has announced a partnership with Kite Distribution to connect UK enterprises with the advanced security insights that shed light into the dark spaces left by other security tools. Situational Intelligence And Automated Investigation ExtraHop Reveal(x) delivers situational intelligence and automated investigation enabling enterprises around the globe to tap into their network for the most complete, objective source of insight into the threats and vulnerabilities that threaten enterprises. Using real-time data analytics for automatic discovery, Reveal(x) can classify every asset in the environment and monitor the traffic flow at up to 100 Gbps to extract more than 4,000 features. Advanced machine learning applied to those features and correlated against critical assets delivers high-fidelity alerts, reducing noise and keeping security teams focused on protecting the most critical assets. Advanced Machine Learning Kite Distribution is one of the fastest growing distributors in the UK, with an experienced team that has quickly built a reputation for offering unrivalled levels of support to resellers and vendors. The value-added distributor specialises in bringing innovative and disruptive technologies to the UK channel, with the goal of driving incremental value. Kite is a value-added distributor offering us a deeply aligned and relevant partnership that will extend our leadership in real-time security IT analytics" “Kite is a value-added distributor offering us a deeply aligned and relevant partnership that will extend our leadership in real-time security IT analytics to bring more security to enterprises in the UK,” says Christian Stanford, Head of EMEA channel sales at ExtraHop. “The team at Kite have deep experience in bringing disruptive, breakthrough security technologies to market and we’re thrilled to be working with them to bring Reveal(x) to a greater set of customers looking to protect their networks from security threats.” Real-Time Analytics “ExtraHop has become the leader in the real-time analytics space and boasts both cutting edge technology and a growing channel,” says Kip Tumber, Director for Kite Distribution. “The solution is a perfect addition to our portfolio and the last several years’ within the UK market has given ExtraHop an ever-expanding level of adoption which we plan to enhance through an active program to educate and support an expanded channel community.” The security analytics market size is estimated to grow from USD 2.83 billion in 2016 to USD 9.38 billion by 2021, according to analyst firm MarketsandMarkets. Kite Distribution will support the entire ExtraHop portfolio including the recently launched ExtraHop Reveal(x). ExtraHop UK customers include Liberty Global (Virgin Media), Sportingbet and Portsmouth NHS Trust.

Hospitality businesses work to provide a safe and pleasant customer experience for their guests. Hotels offer a “home away from home” for millions of guests every day around the world. These are businesses of many sizes and types, providing services ranging from luxury accommodations to simple lodging for business travelers to family vacation experiences. Hospitality businesses also include restaurants, bars, movie theaters and other venues. Security needs are varied and require technologies that span a wide spectrum. We asked this week’s Expert Panel Roundtable: What are the security challenges of the hospitality market?

Leaders in the security industry, government and technology gathered on June 27-28 in Washington, D.C., as the Security Industry Association (SIA) hosted its 2018 GovSummit. Each year, SIA GovSummit offers top-quality information sharing and education on security topics affecting federal, state and local agencies. This year’s summit tackled key security and policy issues like moving security services to the cloud, the use of artificial intelligence and machine learning for surveillance and the path forward for government and private security regarding the commercial use of aerial drones. Additionally, the event featured a half-day, expanded version of SIA’s popular Secure Schools Roundtable, SIA member visits on Capitol Hill, a networking breakfast at the Capitol Hill Club and presentation of the 2018 Legislator of the Year and Statesman Awards. DHS works to protect federal networks and facilities and critical infrastructure Protecting Federal Networks & Facilities Providing keynote remarks at the 2018 GovSummit were Chris Krebs, undersecretary of the National Program and Programs Directorate (NPPD) at the U.S. Department of Homeland Security (DHS), and Soraya Correa, DHS’ chief procurement officer. Krebs highlighted DHS’ work to protect federal networks and facilities and critical infrastructure, the threat of nation-state attacks on American democracy through targeting election equipment and spreading false information on social media to sow division and discord and NPPD’s focus on blending physical security and cybersecurity in a holistic, top-down risk management approach. “Government’s role is to assist in raising the security baseline,” said Krebs. Correa spoke about DHS’ procurement efforts in support of the department’s strategic vision and interest in inviting creativity and innovation in its contracts with organizations. “When we understand each other’s business processes, we can do better business together,” Correa said. “We work with industry, associations and more – we want you to do business with us.” Cybersecurity And Identity Policy In a panel discussion of the Office of Management and Budget’s new cybersecurity and identity policy, Jeff Nigriny highlighted the Interagency Security Committee’s new instructions to federal chief security officers on physical access control systems implementations being fully compliant with federal security standards. “2018 is the year we fix the policy,” Nigriny said. In another session, a panel of experts considered the path forward for government and private security when it comes to unmanned aerial system (UAS) and counter-UAS policy. As drones have become more widely used, national security agencies have raised drone security as an important policy issue. “We could call this time the years of drone security,” said Lisa Ellman, partner at Hogan Lovells LLP and Company and co-executive director of the Commercial Drone Alliance. Rob Reiter was recognized for his leadership on issues related to protective and architectural bollards to address the need for greater perimeter security Public Safety And Security During the summit’s Policy Leadership Awards Dinner, SIA also presented its 2018 Legislator of the Year and Statesman Awards. The SIA Legislator of the Year Award is presented annually to members of Congress and other elected officials who have demonstrated extraordinary leadership in advancing legislation and policies that encourage the effective use of technology solutions to enhance public safety and security and protect critical infrastructure. This year, SIA honored Sen. Orrin Hatch (R-Utah) and Rep. John Rutherford (R-Fla.) for their work on the STOP School Violence Act, Sen. John Thune (R-S.D.) for authoring the Investment in New Ventures and Economic Success Today (INVEST) Act, Sen. Gary Peters (D-Mich.) for authoring the Secure Airport Spaces Act and Rep. Dan Donovan (R-N.Y.) for authoring the Shielding Public Spaces From Vehicular Terrorism Act. The Statesman Award is presented each year to SIA member volunteers who have made extraordinary contributions of professional time, leadership and resources to position SIA to address the public policy challenges impacting the security industry. This year’s recipient was Rob Reiter, co-founder of the Storefront Safety Council and chief security consultant at Calpipe Industries, recognized for his leadership on issues related to protective and architectural bollards to address the need for greater perimeter security. SIA 2018 Partners & Sponsors This event was made possible through Washington sponsor United Technologies (Lenel and Interlogix); Lincoln sponsor HID Global; Jefferson sponsor Johnson Controls; dinner and reception sponsor Allegion; event sponsors AMAG Technology, American Fuel & Petrochemical Manufacturers, Ameristar Perimeter Security, ASIS International, Axis Communications, BCDVideo, Calpipe Security Bollards, Chenega Security, Christie Digital Systems, Defense Forensics and Biometrics Agency, Gallagher, GSA Schedules, Inc., Hanwha Techwin America, DHS Science & Technology, Identiv, Louroe Electronics, Marshalls, Milestone, Nasatka Security, Panasonic, the Partner Alliance for Safer Schools, Renova Technology and the Secure Schools Alliance; media sponsors Campus Safety and DomesticPreparedness.com; and industry partner ISC Security Events.

As an innovator in airport security, Oakland International Airport (OAK) announced that it has installed the Evolv Edge, a physical threat detection and prevention system powered by artificial intelligence, to streamline its employee screening program. This installation enhances OAK’s security posture by protecting against metallic and non-metallic threats while simultaneously improving operational efficiency. Physical Threat Detection System OAK is committed to applying advanced, innovative solutions to complex security operations OAK is committed to applying advanced, innovative solutions to complex security operations. The TSA acknowledged this commitment by selecting OAK as a TSA Innovation Site, a prestigious distinction that promotes improved efficiency and allows the airport to try technologies to benefit its growing passenger and employee base. As the second busiest airport in northern California, passenger travel at OAK is on pace to surpass the 13.2 million travelers that passed through the airport last year. To accommodate this growth, more and more employees are being hired to work at OAK. Therefore, OAK began researching innovative solutions related to employee inspection methods and equipment. Evolv Edge provides OAK with the ability to screen employees for metallic and non-metallic threats with a fast, non-invasive process. Designed with built-in wheels for portability, OAK can easily move the system throughout the airport allowing maximum efficiency for its employee inspection program. Non-Invasive Employee Screening With Edge, organizations, such as OAK, can adapt a risk-based security approach while balancing security with positive experience With this installation, OAK continues to be at the forefront of security through its use of modern technologies to combat today’s evolving threat landscape. By replacing traditional physical screenings with Evolv Edge’s precision, mobility and multi-threat detection capabilities, OAK can control access and respond to different threat scenarios quickly and efficiently. With Edge, organizations, such as OAK, can adapt a risk-based security approach while balancing security with positive experience. “With today’s threat landscape, the security perimeter has expanded beyond traditional checkpoints,” said Mike Ellenbogen, CEO of Evolv Technology and a 20-year veteran in aviation security. “Evolv Edge’s flexibility and portability provides Oakland International Airport with an added layer of security when it comes to employee screening. Oakland International Airport is always at the forefront of innovation, and we will continue working closely with their team to ensure success and safety.”

It was over a century ago that Charlotte Hungerford Hospital (CHH) was founded, as a gift by industrialist Uri T. Hungerford. The vision was to create a community hospital that would serve as a beacon of hope and a place of comfort for the sick and injured. 100 years later, that same community spirit has helped CHH evolve into a vibrant, independent, affordable healthcare network that delivers a comprehensive range of healthcare programs and services for over 100,000 lives in Northwestern Connecticut. A Challenging Safety Diagnosis Avigilon has made us more efficient as we don’t have to spend much time sifting through large amounts of video” Charlotte Hungerford Hospital prides itself on supporting patient and staff safety in all hospital areas and locations. Several years ago, they found themselves with an outdated security system that lacked quality video coverage and recording capabilities. CHH struggled with reliable video playback and faced frequent system crashes. As a result, the hospital’s security operators were often unable to provide accurate evidence during forensic investigations and many liability claims and hospital incidents went unresolved. CHH needed a cost-effective, comprehensive security solution that could protect patients and staff across multiple locations while still being flexible enough to scale with the hospital’s growing needs.  Avigilon AI & Analytics Technology With a desire to improve its legacy surveillance system, CHH looked to Avigilon’s advanced artificial intelligence (AI) technology and video analytics to meet their security needs. CHH began a multi-phase upgrade that included installing over 100 Avigilon cameras with self-learning video analytics, deploying AI-based Avigilon Appearance Search technology and using impulse radar technology with the Avigilon Presence Detector (APD) Sensor. Avigilon Appearance Search technology – a sophisticated deep learning AI search engine – helps CHH quickly locate a specific person or vehicle of interest across all cameras both inside the hospital and care centers as well as outside parking lots. This technology provides CHH’s operators with enhanced situational awareness, enabling fast event response and helping to save time and effort during critical investigations. To protect areas of the hospital where cameras cannot be installed, CHH installed the Avigilon Presence Detector (APD), a discreet impulse radar device with self-learning radar analytics that scans, learns, and continuously adapts to its environment. Avigilon Presence Detector Sensors Our Security Department’s mission at Charlotte Hungerford Hospital is the safety of our patients, visitors, and employees" Capable of detecting persons who aren’t moving or are hidden, the APD sensors help improve situational awareness for CHH staff, and are used in areas where cameras are not permitted, such as restrooms or change rooms. When integrated with Avigilon Control Center (ACC) video management software, APD sensors alert CHH operators of human presence while still maintaining privacy. Avigilon H4 cameras were used throughout the hospital to provide exceptional image quality and built-in self-learning video analytics, which provides accurate detection and notification of movement of people and vehicles. CHH also deployed HD Multi-sensor cameras which provide up to four camera views per camera installation, using only one camera license and network drop. This allows CHH’s staff to efficiently cover all angles in order to detect, verify, and act on potential security events across the hospital’s premises. Avigilon H4 and HD Multi-Sensor Cameras At the core of CHH is a desire to help the community and still serve as the beacon of compassion it was founded to be 100 years ago. With these values in mind, the hospital’s mission when it comes to security is the safety of patients, visitors, and employees. Avigilon’s AI solutions have helped achieve this by moving the CHH system from legacy to advanced and providing effective monitoring around the clock while also helping to create operational efficiencies. Since deploying ACC software, CHH’s operators spend significantly less time reviewing recorded video, allowing them to focus on proactive event response. Working with Avigilon, Charlotte Hungerford Hospital has a roadmap for continued growth and exceptional patient safety.

Founded in 1871, Fulton County School System is the fourth largest school district in Georgia, United States. It consists of 101 schools and administrative support buildings, including 67 elementary schools, 19 middle schools, 17 high schools and eight charter organizations. Fulton’s mission is to provide a safe and secure environment for its more than 96,000 students and more than 12,000 full-time employees. To help enhance safety Search Technology at more than 100 schools, Fulton has installed a full Avigilon surveillance solution that includes Avigilon cameras with self-learning video analytics, Avigilon network video recorders, and Avigilon Control Center (ACC) video management software with Avigilon Appearance Search technology. Fulton is also deploying Avigilon Access Control Manager to secure physical access points, providing an integrated security solution for the district. Fulton sought to replace analog cameras with an end-to-end high definition surveillance system camera system in order to maximize protection Simplifying Recording And Capturing Of Footage Fulton sought to replace analog cameras with an end-to-end high definition surveillance system camera system in order to maximize protection, enable proactive event response, and facilitate the recording, capturing and sharing of clear footage with its school board, police and the concerned public. Securing more than 100 buildings is no easy feat, but it’s of utmost importance to the Department of Safety and Security at Fulton, which also includes the School Police and Student Health Services and Emergency. Upgrading Video Surveillance System With recent data showing above average student incident rates and student disciplinary concerns at some schools, upgrades to the surveillance system were needed to allow better local and remote monitoring in important areas. “One of the biggest security challenges we face is our ability to reliably monitor important areas throughout our schools, especially during an emergency. With Avigilon, we not only benefit from exceptional image quality, but their advanced video analytics, like Avigilon Appearance Search technology, save us valuable time and effort, ultimately making our schools a safer place.” - Paul Hildreth, Emergency Operations, Safety and Security, Fulton County School System. Avigilon high-definition cameras with self-learning video analytics and access control solutions have been installed in 101 schools Appearance Search Technology Avigilon high-definition cameras with self-learning video analytics and access control solutions have been installed in 101 schools. ACC 6 video management software with Avigilon Appearance Search technology is a particularly exciting new development for the district. “We chose Avigilon because of the capabilities it offers in its advanced video analytics search technologies, including Avigilon Appearance Search,” said Paul Hildreth, Emergency Operations, Safety and Security for Fulton. “Their analytics are easy to set up and use, and can save us valuable time and effort, ultimately making our schools a safer place for generations to come.” Video Data Analysis Avigilon Appearance Search video analytics technology uses a sophisticated deep learning artificial intelligence search engine to sort through hours of footage with ease. This technology allows Fulton’s operators to click on a button and search for all instances of a person or vehicle across all cameras on a site, quickly and efficiently. This can save Fulton time and effort during critical investigations as Avigilon Appearance Search technology intelligently analyses video data, helping to track a person’s or vehicle’s route and identify previous and last-known locations. Avigilon self-learning video analytics enable proactive, real-time event response. Built from the ground up to manage high-definition video, Avigilon offers self-learning analytics on camera resolutions of up to 5K (16 MP). Avigilon Multisensor cameras were also set up to capture challenging angles and provide total coverage within a 180 to 360-degree area Avigilon H4 Platform Avigilon H4 bullet and dome cameras from the new H4 platform were installed, offering self-learning video analytics, greater resolution performance and Wide Dynamic Range support. Avigilon H4 cameras are available in 1 to 5 MP and 4K Ultra HD (8 MP) resolutions. Avigilon Multisensor cameras were also set up to capture challenging angles and provide total coverage within a 180 to 360-degree area. Upgrading the district’s surveillance solutions began three years ago with a single high school as a pilot program. The success of this replacement led the district to integrate ACC in other school projects and, in 2014, Fulton opened new administrative centers with both Avigilon access control and video surveillance solutions. At the start of 2017, Fulton began implementing a three-year approach to completing the upgrade. Image Quality And Resolution Before switching to the Avigilon solution, the district was challenged with low system reliability, which resulted in not having video evidence when needed. Furthermore, in situations where there was recorded footage, it was not of high enough quality to provide value. With the installation of Avigilon video surveillance, Fulton has benefited from exceptional image quality and resolution across wide areas in all lighting conditions. The ongoing Avigilon implementation will provide the district with crucial and powerful insights that can help save time and effort during critical investigations. With the help of Avigilon trusted security solutions, the future looks bright for Fulton County Schools.

Pulse Secure, a provider of Secure Access solutions to both enterprises and service providers, has announced that Entegrus has successfully deployed Pulse Policy Secure advanced network access control (NAC), to strengthen overall visibility and access security across their hybrid IT infrastructure. Entegrus, a Canadian energy company, leveraged their existing Pulse Secure virtual private network (VPN) implementation to expedite NAC deployment and fortify their infrastructure in accordance with National Institute of Standards and Technology (NIST) and North American Electric Reliability Corporation (NERC) guidelines. As a result, their security organization extended visibility for remote and on-premise users and devices, as well as enhanced endpoint compliance and Internet of Things (IoT) risk mitigation. We have increased our security posture, and for the most part, there has been zero impact on our end users" Pulse Secure-Entegrus Collaboration Entegrus serves over 58,000 customers throughout Ontario. They bring electricity, renewable energy and water across three large regions, with a workforce spread out over 2,300 square miles. Entegrus’ objective is to provide safe, reliable and cost-effective provision of energy and related billing services, while providing high levels of service to its customers, partners and the communities it serves. IT security plays a critical role in protecting their delivery of energy and data services.  “The threat landscape is constantly evolving, forcing us to always consider how we can go one step further. With a widely distributed IT infrastructure, we considered NAC as an effective way to improve our security posture without dramatically altering how we operate,” said Dave Cullen, manager of information systems for Entegrus. “We have a long-standing relationship with Pulse Secure. The level of integration between Pulse Secure secure sockets layer (SSL) and NAC, as well as the extended feature set, made it a straightforward choice for us. Perhaps, the two most important things are that we have increased our security posture, and for the most part, there has been zero impact on our end users.”  Active Control With Seamless Network Access Ensuring always active control while maintaining flexible, seamless access to network and application resources is an essential requirement for utility providers. Within such highly regulated industries, best practices dictate a constant cycle of security readiness review and improvement to meet an increasingly potent threat posed by cyber threat actors. NAC provides foundational endpoint intelligence, resource access enforcement and IoT defences that support industry and regulatory compliance guidelines. These compliance requisites apply to both regional and large national critical infrastructure providers.  For stretched IT departments, Pulse Secure’s Secure Access solutions are designed to streamline deployment and on-going administration using an easy, integrated, policy-driven platform that works with a customer’s existing installed base and network infrastructure. In addition, Pulse Secure’s VPN solution utilizes the same endpoint client, policy engine and appliance management as the NAC solution. Entegrus took advantage of this platform capability to rapidly implement NAC. As a result, they gained dynamic intelligence, unified policy management, automated enforcement and threat response through a single management console. We needed to make sure our secure access technologies could adapt to new regulatory requirements and new business needs" Secure Access Solutions Cullen highlights numerous benefits, including a simplified method of managing complex policies and user access rights, as well as an enforceable method of checking end-point devices to ensure that only properly patched operating systems can connect to the network. Another advantage of Pulse Policy Secure was evident after Entegrus recently merged with London, Ontario-based St. Thomas Energy. “We needed to make sure our secure access technologies could adapt to new regulatory requirements and new business needs, as the recent merger added new, unqualified infrastructure and grew our customer base by around a third, which also led to the hiring of 28 new staff members,” Cullen added.

Hospitality businesses work to provide a safe and pleasant customer experience for their guests. Hotels offer a “home away from home” for millions of guests every day around the world. These are businesses of many sizes and types, providing services ranging from luxury accommodations to simple lodging for business travelers to family vacation experiences. Hospitality businesses also include restaurants, bars, movie theaters and other venues. Security needs are varied and require technologies that span a wide spectrum. We asked this week’s Expert Panel Roundtable: What are the security challenges of the hospitality market?

In the analog era, videotape was the storage media of choice for CCTV systems. Since the advent of digital video, and of IP-based systems, a variety of other storage formats have come to the fore, including hard drives, flash drives, SD cards and others. Now we are in the age of the cloud, which offers new opportunities to store vast amounts of video and presents challenges such as bandwidth and cybersecurity. For a current perspective on storage, we asked this week's Expert Panel Roundtable: How are new developments in video storage impacting the video surveillance market?

The reviews are in, and ISC West was another hit. Brisk attendance and a comprehensive lineup of the industry’s top companies and products contributed to another successful show for Reed Exhibitions. Our Expert Panel Roundtable, who have attended many such events, added their own reflections to the industry’s post-ISC glow. We asked this week’s Expert Panel Roundtable: How successful was ISC West 2018 for security industry exhibitors and visitors?