Latest / CYBR.Signal / Cybersecurity Products: Innovation vs Need vs Practicality

Transcript

Cybersecurity Products: Innovation vs Need vs Practicality · CYBR.Signal

• 0:00
  SPEAKER_00: Hello everybody, happy Cyber Sunday.
• 0:02
  SPEAKER_00: Michael Farnum here.
• 0:03
  SPEAKER_00: Hope you're doing well.
• 0:04
  SPEAKER_00: Want to talk about the difference between a tool that is innovative, specifically obviously, in the cybersecurity world, something that's really new and actually has a need to meet today, versus the practicality of putting in said tool into an environment and making it work.
• 0:27
  SPEAKER_00: So one of the um things that I've talked about in the past are uh like security validation tools.
• 0:35
  SPEAKER_00: I truly think the security validation arena, um, specifically with the ones that would go into your environment and simulate attacks through your environment, I thought that was an innovative concept.
• 0:48
  SPEAKER_00: Still do think it's an innovative concept.
• 0:51
  SPEAKER_00: It's not necessarily brand new.
• 0:54
  SPEAKER_00: I mean, there are tools that do automatic automated pen testing, that kind of stuff have been for a little while.
• 1:01
  SPEAKER_00: But this is you know kind of a specific area of validating your environment and the other tools that you have in your environment.
• 1:09
  SPEAKER_00: Think that is uh was very innovative when it came out and is still a thing I think a lot of people, if not all environments, need.
• 1:17
  SPEAKER_00: However, we've got a lot of customers that from a practicality practicality standpoint, when the first versions of that came out, and it's getting easier now, but the first versions of that came out, it's really hard to get in their environment.
• 1:29
  SPEAKER_00: So innovative product, hard to get in their environment.
• 1:32
  SPEAKER_00: What happened?
• 1:33
  SPEAKER_00: Didn't sell quite as much as they thought it was going to, especially in certain areas.
• 1:37
  SPEAKER_00: Still did well, people put it in, people use it, people still use it today, all kinds of different vendors in that space.
• 1:44
  SPEAKER_00: But that was kind of that where do you have a convergence of practicality versus innovation that wasn't important enough for some people to put in and to make enough of a difference in their environment because it was hard to put in.
• 2:00
  SPEAKER_00: Now, today there are things uh are tools that people want to put in for cloud security, and just about everybody needs that, everybody's moving to the cloud, or almost everybody.
• 2:13
  SPEAKER_00: Um being able to secure those environments, find out if you're compliant in those environments, find out if you've got bad configurations, that kind of stuff.
• 2:22
  SPEAKER_00: We've talked about that on here, that on here before, the CNAP area and all those different areas.
• 2:28
  SPEAKER_00: That I think is something that is also innovative, um, needs to be put in, is solving a problem, and honestly, it is relatively easy to put into your environment.
• 2:40
  SPEAKER_00: There's some complications there, but generally you just need an API connection and you can start pulling out those configurations and you can get some real live good data actually relatively quickly.
• 2:52
  SPEAKER_00: So now you've got two areas where the the practicality and the innovation are meeting.
• 2:58
  SPEAKER_00: I talked about a few weeks ago after I came back from Black Hat, kind of the same thing.
• 3:03
  SPEAKER_00: There isn't there's innovative tech that shouldn't be innovative, which is asset management.
• 3:10
  SPEAKER_00: Um, practically speaking, not a very easy problem to solve.
• 3:16
  SPEAKER_00: But now that we've got all the all these other tools with all these other sources of truth, the practicality and the innovation of that tech are starting to come together and starting to meet, and you're starting to get people who are able to put those in, and it's not as difficult as it used to be to do asset management.
• 3:36
  SPEAKER_00: Another one, um, which is an interesting case, I think, was when um next gen uh antivirus, sorry, antivirus came out.
• 3:49
  SPEAKER_00: Next gen antivirus, very innovative, was solving a problem of having too many signatures, those kind of things, making those things, those antivirus, old antivirus tools pretty ineffective.
• 4:02
  SPEAKER_00: Practically, you had to put a whole new agent everywhere to do all those things, but the need was great enough to where people still did it.
• 4:10
  SPEAKER_00: I would argue that getting that agent and all the other agents now is make making some tools getting distributed more difficult because people don't want to put agents, but that's a whole nother conversation.
• 4:20
  SPEAKER_00: So generally, just it's this is more philosophical than anything, but would love to hear your thoughts or read your thoughts on it, on what are some tools that you saw in the cybersecurity industry as you've been in this industry that were innovative, solved a problem, and met a practical and were practical enough to put in, or were innovative and were solving such a big problem that it the practicality didn't matter, or vice versa, they were innovative, solved a problem, but the practicality really did get in the way of putting those in.
• 4:54
  SPEAKER_00: Hope that makes sense.
• 4:56
  SPEAKER_00: Let me know what you think in the comments below.
• 4:59
  SPEAKER_00: Talk to you next time.