25 percent of security analysts' time is wasted on false positives

Security analysts in US enterprises spend around a quarter of their time chasing false positives because security alerts or indicators of compromise (IOCs) are erroneous. This is among the findings of research carried out by Exabeam and the Ponemon Institute which also shows that security teams must evaluate and respond to nearly 4,000 security alerts per week. While false positives are the largest drain on resources, the study also shows that investigating actionable intelligence and building incident timelines; and cleaning, fixing and/or patching networks, applications and devices resulting from an incident each take over 15 percent of a security team’s… [Continue Reading]