HP this week released new big data tools designed to provide businesses with better information security intelligence gathering capabilities, and launched a new information security research group that’s been tasked with providing better threat intelligence for HP’s own security products.
On the big data front, HP said users of HP ArcSight’s security information and event management (SIEM) can now integrate the software with the HP Autonomy IDOL content analytics engine. According to HP, “this combination automatically recognizes the context, concepts, sentiments and usage patterns related to how users interact with all forms of data,” and gives businesses a new way to translate raw security data into more actionable intelligence by helping security managers better track individual users’ behavior patterns and spot signs of unusual activity.
To help businesses monitor more security events at once, HP also released a new HP ArcSight/Hadoop Integration Utility, which integrates HP ArcSight ESM 6.0c with Apache Hadoop, the open source data processing platform that’s been driving the push toward big data. According to HP, the combination of Hadoop’s large-scale data repository and ArcSight’s reporting, search and correlation capabilities can be used to apply “statistical analysis, anomaly detection and predictive analytics” for security events contained in petabytes of captured data.
The company also announced a new HP ArcSight Cloud Connector, designed to allow businesses to collect application event and log data from cloud service providers.