How Hackers Can Be the Answer to Cyber-Security Challenges

Today’s topics include a researcher urging enterprises to embrace hackers to improve security, and a major update of SAP Data Hub that distills business value from an organization’s data.

Cyber-security researcher Keren Elazari delivered the keynote address at the SecTor conference in Toronto on Oct. 2, claiming hackers can help companies improve cyber-security and providing an overview of current cyber-security challenges.

According to Elazari, "The first lesson that we can learn is that all the digital devices out there have value, and they can and will be used against us." With unauthorized cryptocurrency mining, also referred to as crypto-jacking, attackers are monetizing whatever they can, injecting code into systems and browsing sessions.

Elazari also stated that organizations need to do a better job with passwords, which are at the root of many data breaches and are commonly reused. She advocates for the use of passphrases, which can be harder to attack while being easier to remember. Ultimately the challenge of cyber-security requires human intelligence as well, Elazari said. 

To that end, she suggests that organizations build a strong security culture that embraces the hacker mindset, since hackers tinker with things to see if they can break and question how operations work.

Enterprise software giant SAP announced a major update to the SAP Data Hub at the company’s annual SAP Tech-Ed conference in Las Vegas on Oct. 2. Described as an all-in-one data orchestration solution, Data Hub helps customers build, execute, orchestrate and govern flow-based pipelines and maximize the reuse of existing data developments while encompassing digital innovations.

Data Hub leverages a metadata catalog and policy management for trusted meta-data discovery, refinement and publishing environment.

SAP Data Hub is the core data orchestration solution for distributed data operations in the SAP HANA Data Management Suite—the company’s end-to-end, open data framework for building modern “intelligent” applications.