Financial Services Organization

ArcSight Intelligence protects business critical trading algorithms.

Outcomes

+ SaaS deployment for ease of maintenance and support
+ Analytics-led security approach boosts productivity of small team
+ Identified and neutralized previously unknown threat vectors

SaaS

Deployment for ease of maintenance and support

Challenge

Deploy sophisticated anomaly detection to protect confidential trading algorithms that are central to the success of the business.

Details

About Financial Services Organization

In a highly regulated industry such as financial services protecting sensitive data is key. In this organization’s case they particularly wanted to protect specific trading algorithms which were the source of differentiating intellectual property (IP). Its Security Architect recognized another challenge: “We have a small security team in place with many different priorities. I understand the need for proper anomaly detection, and needed a solution that gave us real analytics, rather than the ‘black box’ messages we received from some vendors. Furthermore, I had tried Open Source solutions and found them to be too resource intensive. We needed something that was easy to maintain.”

ArcSight Intelligence Identifies and Neutralizes Unknown Threat Vectors

ArcSight Intelligence was deployed in a SaaS model for worry-free maintenance and support. Early analytical results identified previously unknown threat vectors with several active service accounts connected to retired target applications. These threats neutralized and investigated; the organization can rest assured its IP is safe.

The organization plans to expand ArcSight Intelligence data sources and profile every network device for greater coverage.

“ArcSight Intelligence identified a local service account used to successfully access certain resources, even though most of its authentication attempts failed. We believe this was a reconnaissance activity that could have resulted in data theft. Thanks to ArcSight Intelligence this is currently under investigation.”

SECURITY ARCHITECT
Financial Services Organization

Related Stories