123ArticleOnline Logo
Welcome to 123ArticleOnline.com!

ALL >> Computers >> View Article

100,000 Tweets In 1 Day – How One Company Discovered A Security Breach Using Big Data Analytics

By Author: Lauren Ellis
Total Articles: 35

As the recent breach involving millions of Target customer credit cards illustrates, security breaches leave a pattern of activity that is mathematically unusual. As cyber criminals increasingly use the cloud as an attack vector, these attacks also create anomalous activities that indicate something is wrong. In mathematical terms, they produce outliers that are several standard deviations away from normal user activity. A breach is usually at the edge of the bell curve and stands out as unusual.

The challenge for today’s companies is to identify these anomalous events quickly and then take immediate steps to investigate, take action, and limit the damage. With billions of transactions to look at, how do companies find the needles in very large haystacks? They need scalable cloud analytics to analyze large volumes of transaction data and automatically find anomalous activity.

Interesting Usage Anomalies Actually Evidence of Breaches
Using Skyhigh’s cloud analytics, Fortune 2000 companies have identified security breaches and taken corrective action before they threatened their businesses. Here are some of the most creative attacks we’ve uncovered:

Malware stealing data via Twitter – At a large financial institution, Skyhigh identified a single IP address at the company that was sending over 100,000 tweets per day. The corporate Twitter account only had few thousand tweets since inception. Investigating further, they discovered that it was malware exfilterating data 140 characters at a time via a Twitter account.

Command and control using GoToMyPC – At a retail company, Skyhigh identified a single device attempting to connect to GoToMyPC 11 million times in a single week. After investigating, they discovered the computer was infected with malware and attempting to connect so it could be used to infiltrate the company.

Blocked attempts to use Facebook – At an energy company, a single device made 3.8 million attempts to access Facebook, all of which were blocked. The computer was infected with malware and was attempting to connect to exfiltrate data from the company.

Author :
Lauren Ellis is a research analyst covering the technology industry’s top trends & topics, focusing on Cloud Security, Cloud Computing, Data Loss Prevention etc.,

Total Views: 77Word Count: 345See All articles From Author

Computers Articles

1. Defend Your Business From Ibm I Series Disaster Recovery Mistakes
Author: Noah Truax

2. Best Free Online Project Management Software
Author: Case Camp

3. Optimizing The Contract Management Process
Author: James Blake

4. Affordable Services For Xbox One Repair Glasgow
Author: Tony Blair

5. Things You Need To Know Before Choosing Free Proxies
Author: Limeproxies

6. 0x4004f00d
Author: kiran

7. 0x4004f00c
Author: sandhya

8. Windows Update Error 80244018
Author: sanvi

9. Major Factors Affecting A Successful Implementation Of Hospital Management System
Author: sanchi mehra

10. Quick Fixes For Sony Playstation 4 Repair Leeds
Author: Tony Blair

11. Ecommerce Development In Prahladnagar
Author: ECommerce Development in Prahladnagar

12. How Norton App Lock Works?
Author: James Watson

13. How To Determine & Choose Best Online Cloud Backup Services ?
Author: Vidhi koya

14. Issues & Fixes For Xbox One Repair London
Author: Tony Blair

15. Microsoft Customer Service Your Way To Success
Author: Janey Smith

Login To Account
Login Email:
Password:
Forgot Password?
New User?
Sign Up Newsletter
Email Address: