There's a big difference between threat data and threat intelligence, says Kevin Epstein of threat intelligence firm Proofpoint. Data alone is not enough to predict emerging threats, he says.
"Threat data will tell you what happened to you, but threat intelligence will tell you what is about to happen to you," Epstein says. In order to move beyond mere data toward intelligence, organizations have to have forensics and other information that allow them to correlate threat data in a meaningful way, he explains.
In an interview with Information Security Media Group at RSA Conference 2015 in San Francisco, Epstein discusses:
- How education is curbing employees from falling for phishing schemes;
- Why more phishing attacks are targeting businesses, not consumers; and
- Why intelligent security must involve automation.
Proofpoint provides software-as-a-service and on-premises solutions for inbound email security, outbound data loss prevention, privacy protection, email encryption, electronic discovery and email archiving.