Watson for Cyber Security

Watson for Cyber Security is the version of the cognitive IBM Watson platform which is intended for fight against cyber crime.

2017: Watson for Cyber Security manages TsIB

On February 14, 2017 IBM announced start of Watson for Cyber Security for management of cognitive Information Security Centers. As a part of developments the chat-bot managed by the Watson system, the voice assistant on security issues.

The division of IBM Security presented the solution Watson for Cyber Security, the industry-first complemented intellectual technology developed for management of cognitive Information Security Centers (security operations centers, SOC). During 2016 the Watson system studied language of cyber security and processed more than 1 million documents on this subject. For February 14, 2017 a system is capable to help to understand to analysts on security issues thousands of reports prepared in a natural language which were unavailable to normal instruments of information protection earlier.

Step up to the Cognitive Era with Watson for Cyber Security, (2016)

According to a research of IBM, a command on information security support daily select more than 200 thousand incidents in the system of protection. More than 20 thousand hours a year leave on processing of false threats. Need of implementation of cognitive technologies in Information Security Centers is particularly acute as within the next five years, according to outputs of IBM, the number of incidents in the system of protection will double.

The IBM company made the decision on integration of Watson for Cyber Security into the IBM Cognitive SOC platform, having integrated cognitive technologies and transactions in a security system. It will allow to react to the threats arising on end devices in network, at certain users and in a cloud. The central component of the IBM QRadar Advisor with Watson platform, the tool connected to base of insights on cyber security of Watson.

Modern sophisticated cyber attacks use a set of channels with the purpose to hide the activities. It is very difficult to our security experts to detect these threats in the huge data arrays connected with information protection. The Watson system interferes with attempts to hide information thanks to fast processing of a large number of data streams. Then it compares this information to data on the last cyber attacks and provides more complete picture of threats. Watson within several minutes creates reports on these threats that allows to reduce significantly an amount of time between detection of a potential incident and the corresponding reaction of a command on security. Sean Valkamp, CIO of Avnet

2016: Announcement of the solution

On May 10, 2016 IBM submitted the new version of the cognitive Watson platform which is intended for fight against cyber crime. The company will develop the new project together with the lead educational institutions.

It is planned that monthly Watson will be able to process up to 15 thousand new documents connected with the information security (IS). It is about reports on threats and the strategy of cybercrimes, databases of viruses and materials from laboratory IBM X-Force which publishes more than 20 years own researches, having detected during this time over 8 million spam - and phishing attacks and also having provided information more than about 100 thousand documented vulnerabilities.

IBM learns the Watson supercomputer to struggle with hackers

Possibilities of natural languag processing which allocate Watson should help the supercomputer to understand huge arrays of unstructured data. The methods of intellectual information analysis implemented in it will allow to reveal abnormal indicators by search of cyberthreats, and instruments of holding the graphic presentations will promote finding of communications between data in different documents, reported in IBM.

Finally IBM with assistance of the Californian state polytechnical university, the Massachusetts Institute of Technology, the State university of New York and some other higher education institutions will start a cloud service under the name Watson for Cyber Security which will give ideas of the arising cyberthreats and the recommendation about fight against them.

According to the report of Ponemon Institute for 2015, the cybersecurity staff of the companies spends more than a half of the working time on studying of false cyberthreats therefore the organizations waste about $25 thousand a week.

Watson will help these workers, but will hardly replace them, the vice president of IBM Security Caleb Barlow says. According to him, a "smart" system will help to place the correct priorities in a never-ending flow of notifications about cyberthreats that will allow to accelerate fight against dangerous attacks and to quickly find new dangers.

Work on modification of the Watson platform addressed for fight against hackers will begin fall of 2016. Betou version of a product is going to be provided until the end of the year.^[1]

Notes