IBM Announces Cloud-Based Community Platform for Cyber Security Applications - Seite 3

IBM Security Connect will also be an integral part of IBM Security Services offerings both as a consumer and a contributor of new innovation; including advancements in voice-enabled AI, machine learning for security threat scoring, global threat analytics, orchestration playbooks and mobile-enabled MSS applications.  IBM Security Services will leverage the open power of IBM Security Connect to develop deep and valuable integrations across its partner ecosystem to deliver greater value for its global customers.

Addressing Complexity in Cybersecurity Operations

Designed to deliver "community-driven" security strategies, IBM Security Connect will operate as an open platform with an open development community.  As part of today's announcement, a significant number of technology partners and global system integrators including Cisco, Capgemini, Carbon Black, Check Point, CrowdStrike, EY, ForeScout, Forcepoint, Fortinet, McAfee, Qualys, Smarttech, Symantec, Tenable, Trend Micro, and VMware have committed to integrating with IBM Security Connect in order to help provide improved data sharing across security vendors for our joint clients.  Many of these vendors will also contribute to building integrated applications on IBM Security Connect.  IBM already has hundreds of pre-built apps built by IBM and partners available via the IBM Security App Exchange for integrating at the product level. Once available, these additional integrations will be built into IBM Security Connect within months of launch, widening the reach of the platform to help manage compliance and address threats.

For example, one of the first solutions being tested by clients will focus on Threat Operations Workflow. This solution is designed to empower security analysts to proactively identify, investigate, and respond to their most critical threats from a single, cloud-based solution. Threat Operations Workflow integrates seamlessly through open connectors to QRadar (both on-premise or cloud), as well as other SIEMs and endpoint solutions. By leveraging open SDKs, other security data ponds or lakes such as Hadoop, and point security products can be supported to provide a federated view and workflow for security analysts across previously unintegrated and siloed products.