Ever More Data, but Still Cyber Vulnerable

Aaron Hand is the managing editor for Control Design and Industrial Networking. Email him at [email protected] or check out his Google+ profile.After hearing Shawn Henry, president of CrowdStrike Services, give dire warnings about the rampant threats to network infrastructures and the data they hold, IBM's Michael Valocchi wondered aloud whether perhaps we should just keep all that big data to ourselves.

Henry and Valocchi both spoke as part of the Wednesday morning keynote session at ABB Automation & Power World this week in Orlando, Fla. Henry, who spoke about cybersecurity dangers, knows what he's talking about. He's a retired executive assistant director at the FBI who oversaw computer crime investigations around the world.

"The DNA of all of your companies resides on the Internet. And it's incredibly valuable," Henry said, noting the value of intellectual property, R&D, corporate strategies and more. "There's an increasing push to move it all to the network. But it's all riding on an inherently insecure infrastructure."

That infrastructure, Henry insisted, is only getting larger and less protected. "Imagine trying to protect a building with 100,000 doors," he said. "There are too many vulnerabilities right now."

It's an incredible challenge for which there is no short-term answer, Henry said. To make a better run on the problem, however, the focus needs to change. "We've been focused on how to reduce our vulnerabilities," Henry pointed out. "We need to focus on who our adversaries are."

Those adversaries take three main shapes: organized criminal groups, largely centered in Eastern Europe, that are focused on monetary gain by attacking major corporations; terrorist organizations, which are an increasing threat, particularly to infrastructure; and foreign intelligence services, groups operating on behalf of governments that steal data for economic gain, military gain or some other advantage.

And while the public might run screaming from the threat that a physical bomb presents, people have a harder time understanding and grasping the very real threat of having an unwelcome visitor in their network. "In many cases, the adversary has been in that network for months or even years, and has gone undetected," Henry said, noting such adversaries as trusted insiders, disgruntled employees or people setting up wireless hotspots, just waiting to intercept vital information.

"We often think of the vulnerability of data; you want to maintain some level of confidentiality," Henry said. "But with the depth and breadth of access that adversaries have right now, they can change the data or completely destroy it."

"The DNA of all of your companies resides on the Internet." Shawn Henry of CrowdStrike Services challenged ABB Automation & Power World attendees to lead by example in their companies' cybersecurity efforts.That data, along with advanced analytics, is what Valocchi, global energy and utilities industry leader at IBM Global Business Services, came to talk about. "Big data," he said, has replaced "smart grid" as one of the most overused and misunderstood terms used today. Above all, Valocchi emphasized that big data is not a technology trend, but rather a business trend. "If I can't prove the business value, I'm not going to embark on the journey," he said.

The concept of "big data" refers to the sheer volume of data that's out there — the scale of data (terabytes) and the variety of data. It's coming at us from so many different sources, in near-real time, and now even in unstructured forms, Valocchi said. "It's all over the place. And it's coming at us so quickly like nothing before," he said. "And we also have to worry about the veracity of the data. How certain are we that the data is good?"

Valocchi summed up the issue surrounding big data with four key characteristics: volume, variety, velocity and veracity.

Although Valocchi called it "early days" for big data, a lot of data-based initiatives are beginning to take off around the globe. A survey of executives found that almost half of the organizations polled are at least having discussions about big-data projects. The survey showed that 47% are planning big data activities, and almost a third (28%) are at the pilot and implementation stages.

On top of that, Valocchi said, the big data discussions have moved out of the IT departments and to operational, finance and other departments. "It's no longer an IT-driven discussion."

Valocchi reported on five key findings:

1. Customer analytics are driving big data initiatives. This is happening not just in banking, but in industry and utilities as well. "This isn't about putting people in buckets; this is about treating each person as an individual," he said.
2. Big data is dependent on a scalable and extensible information foundation.
3. Initial big data efforts are focused on gaining insights from existing and new sources of internal data.
4. Big data requires strong analytics capabilities. "We don't necessarily have those within our company in the scale that we need them," he said. "We can't get analytical people into the industry quick enough. There's an actual lack of talent in the marketplace."
5. The emerging pattern of big data adoption is focused on delivering measurable business value. Initial projects are based on measurable business value.