IBM Announces Cloud-Based Community Platform for Cyber Security Applications - Seite 2

A New, Open Approach to Cloud Security

IBM Security Connect will help tackle some of the biggest security challenges today via open standards, which can help pave the way toward collaborative innovation. As it is built on open standards, it can help companies build unique microservices, develop new security applications, integrate existing security solutions, and leverage data from open shared services. 

Key services include: Open security data integration services for sharing and normalizing threat intelligence, federated data searching across on-premise and cloud data repositories and security solutions, and real-time sharing of security alerts/events and insights that can be leveraged by any app or solution integrated with the platform. 

IBM Security Connect will become the home of IBM's current Security App Exchange and all IBM Security applications built on a platform powered by IBM Cloud, but fully compatible with other cloud providers.  IBM Security will also champion the creation of new open standards in burgeoning areas such as the sharing of response playbooks and analytics patterns and will actively invest in developing new open source projects that align with these efforts.

IBM Security's commitment to openness also means that many existing open security and protocol standards are leveraged throughout the platform, such as STIX (Structured Threat Information eXpression) and TAXII (Trusted Automated eXchange of Indicator Information). The IBM Security project STIX-Shifter, which is publicly available on GitHub, consists of an open source library which allows software to connect to products that house data repositories using STIX Patterning, and return results as STIX Observations.  Using these open standards for connecting to any data source combined with IBM Security's already powerful security analytics and incident response capabilities helps clients to gain broader visibility and detect threats and risks that were otherwise missed due to disconnected data across complex hybrid environments. 

IBM Security Connect's initial set of applications and services will allow users to quickly connect to multiple security products or data repositories to automatically federate data for the purpose of prioritizing and responding to threats. This revolutionary approach of federating data enables clients to leave their data where it is, as opposed to building costly data lakes, which can complicate or outright prevent security data analysis.