By Craxel Founder and CEO David Enga
August 30, 2024
This topic makes my blood boil... (NSA's China specialist: US at a lost to deter Chinese hackers, https://breakingdefense.com/2024/08/nsas-china-specialist-us-at-a-loss-to-deter-alleged-chinese-hackers/)
We can make huge improvement in the status quo but we need more urgency.
The software underlying IT needs a rebuild so that it's memory safe, employs zero trust using strong cryptography, and has built-in resilience. That's NOT GOING TO HAPPEN any time soon because the revenue streams of trillion dollar companies would be perturbed. Even with these changes, IT will never be completely secure, that's impossible. But we CAN dramatically increase the cost and time required to penetrate it.
We can also detect much faster, so that we can remediate and prevent breaches from expanding. To do so, we need an exponential improvement in observability on the network. Typical analytics platforms are too inefficient and slow to provide this at the needed scale. Buy data warehouse or data lake software for your cyber data and your threat hunters with scarce and precious skills will be taking 3 hour naps waiting for their query results. I don't know why IT decision makers don't understand these things, its pretty simple math. To scan a terabyte of data in 1 second requires 10,000 disk drives and 5,000 CPUs operating in parallel AND you need to split the 1 TB across them. Scanning models CAN'T WORK at the necessary scale when you need fast query- because you can't afford the inefficiency.
Humans and AI algorithms need instant access but nobody can afford the massive clusters of servers that would be necessary to hold petabytes of data and provide fast query. Don't think you need to keep many months to years worth of data hot? If you don't, you won't be able to deal with attackers that come in low and slow. Therefore we need an exponential improvement at the algorithm level for organizing data in cheap hyperscale storage that provides that rapid query over massive quantities of data without the cost. The next generation cyber defensive platform should also be able to correlate many data sources immediately with cyber threat intelligence AND be constantly running AI models looking for the unknown.
...and yes, Craxel's software runs in a memory-safe language, is built on a robust zero trust framework leveraging Craxel's multiple patents in high performance searchable encryption, provides resilience through massively scalable strong consensus, our analytics are built on an O(1) multidimensional hash algorithm that is an actual exponential improvement for observability without running expensive clusters of servers, and our cyber defensive platform Black Forest Reaper provides real-time correlation between cyber threat intelligence and network telemetry.
Did you know if you are a DoD program you can EASILY pilot or procure Black Forest Reaper for production through DoD CDAO Tradewinds? They'll happily assist your contract officers with how to do it.
