HP Introduces User Behavior Analytics Solution to Accelerate Detection of Insider Threats

HP ArcSight offering harnesses predictive analytics on user behavior to rapidly detect and mitigate risks

SAN FRANCISCO, April 21, 2015—HP today announced HP ArcSight User Behavior Analytics (UBA), a new offering that gives companies visibility into user behavior, delivering a simple, efficient way to detect malicious or negligent users, or external attacks that compromise user accounts across the enterprise.

The new offering leverages context-enriched activity data to generate behavioral baselines generated by enterprise users along with broader network event intelligence to rapidly detect the most complex threats. HP ArcSight is expanding into UBA as a complement to its market-leading Security Information and Event Management (SIEM) platform so organizations can proactively track and identify both the “enemy within” as well as external IT security threats.

According to Gartner (@Gartner_inc), the amount of data analyzed by enterprise information security organizations will double every year through 20161.  As this volume of data increases, so do the risks. Annual Verizon data breach reports found that 84% of all breached records were a result of stolen login credentials2 and 76% of breaches were the result of stolen or weak credentials3. In addition, according to Gartner, by 2018, at least 25% of self-discovered enterprise breaches will be found using user behavior analytics3.

“As insider and persistent threats become more sophisticated and frequent, organizations must employ security intelligence capabilities that can quickly assess, identify and analyze user behavior against risk tolerance,” said Mike Armistead, general manager, HP Security,ArcSight. “HP ArcSightgives enterprises visibility into user behavior, enabling the detection of critical threats before they unleash serious impact on the business.”

HP ArcSight User Behavior Analytics is powered by Securonix, a leader in security analytics and insider threat management, and HP ArcSight’s detection and security information and event management technology. The offering ranks detected anomalies and the associated risk, allowing HP ArcSight customers to focus efforts and resources on the activities, users and applications that pose the greatest risk to the enterprise. As the only security intelligence solution on the market that offers fully featured signature-less threat detection capabilities, HP ArcSight User Behavior Analytics offers the following benefits to customers:

Rapid detection of the bad guys:HP ArcSight User Behavior Analytics actively and continuously monitors the actions of privileged users for risky or unusual activity to lower the risk and impact of cyber-attacks.

Rapid event resolution: To achieve fast event resolution and mitigate breaches to minimize impact, HP ArcSight User Behavior Analytics mines, enriches and transforms an organization’s SIEM data by providing detailed visibility into a user’s behavior, resulting in actionable intelligence on known and unknown threats against the entire IT stack.

Enhanced monitoring and investigation:HP ArcSight User Behavior Analytics simplifies and streamlines the alert management process, reduces time to investigate alerts, and minimizes amount of staff required, making the whole investigative process more efficient. According to Gartner, by 2017, at least 80% of companies that adopt UBA will achieve at least a 5-to-1 ROI within one year of implementation by achieving productivity gains and lower security or fraud incidence costs1.

Additional information about this offering and other HP Security solutions is available at HP booth No. 3403 north hall, at the RSA Conference 2015 taking place this week in San Francisco. Keep up with event happenings by following the event hashtag #RSAC and follow @HPsecurity.

About HP Security
HP enables organizations to take a proactive approach to security, disrupting the life cycle of an attack through prevention and real-time threat detection. With market-leading products, services and innovative research, HP Enterprise Security enables organizations to integrate information correlation, application analysis and network-level defense. Additional information about HP Enterprise Security can be found at www.hp.com/go/esp.  

Join HP Software on Linkedin and follow @HPSoftware on Twitter. To learn more about HP ArcSight and HP Enterprise Security Products on Twitter, please follow @HPsecurity and join HP Enterprise Security on Linkedin.

HP’s annual enterprise security user conference, HP Protect, takes place September 1-4 in Washington, D.C.

1 Gartner - Information Security Is Becoming a Big Data Analytics Problem, Published: 3 March 2012,  Analyst): Neil MacDonald
2 Verizon Enterprise 2012 Data Breach Investigations Report
3 Verizon Enterprise 2013 Data Breach Investigations Report
4 Gartner - Best Practices and Success Stories for User Behavior Analytics, Published: 4 March 2015, Analyst: Avivah Litan
5 Gartner - Market Guide for User Behavior Analytics, Published: Aug 2014, Analyst(s): Avivah Litan, Mark Nicolett

© 2015 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

This press release contains forward-looking statements that involve risks, uncertainties and assumptions. If such risks or uncertainties materialize or such assumptions prove incorrect, the results of HP and its consolidated subsidiaries could differ materially from those expressed or implied by such forward-looking statements and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements, including but not limited to statements of the plans, strategies and objectives of HP for future operations, including the separation transaction; the future performance if Hewlett-Packard Enterprise and HP Inc. if the separation is completed; any statements concerning expected development, performance, market share or competitive performance relating to products and services; any statements regarding anticipated operational and financial results; any statements of expectation or belief; and any statements of assumptions underlying any of the foregoing. Risks, uncertainties and assumptions include the need to address the many challenges facing HP’s businesses; the competitive pressures faced by HP’s businesses; risks associated with executing HP’s strategy, including the planned separation transaction, and plans for future operations and investments; the impact of macroeconomic and geopolitical trends and events; the need to manage third-party suppliers and the distribution of HP’s products and services effectively; the protection of HP’s intellectual property assets, including intellectual property licensed from third parties; risks associated with HP’s international operations; the development and transition of new products and services and the enhancement of existing products and services to meet customer needs and respond to emerging technological trends; the execution and performance of contracts by HP and its suppliers, customers, clients and partners; the hiring and retention of key employees; integration and other risks associated with business combination and investment transactions; the execution, timing and results of restructuring plans, including estimates and assumptions related to the cost and the anticipated benefits of implementing those plans; the execution, timing and results of the separation transaction or restructuring plans, including estimates and assumptions related to the cost (including any possible disruption of HP’s business) and the anticipated benefits of implementing the separation transaction and restructuring plans; the resolution of pending investigations, claims and disputes; and other risks that are described in HP’s Annual Report on Form 10-K for the fiscal year ended October 31, 2015, and HP’s other filings with the Securities and Exchange Commission, including HP’s Quarterly Report on Form 10-Q for the fiscal quarter ended January 31, 2015. HP assumes no obligation and does not intend to update these forward-looking statements.


About HP Inc.

HP Inc. creates technology that makes life better for everyone, everywhere. Through our portfolio of printers, PCs, mobile devices, solutions, and services, we engineer experiences that amaze. More information about HP Inc. is available at http://www.hp.com.

© 2016 HP Inc. The information contained herein is subject to change without notice. The only warranties for HP Inc. products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP Inc. shall not be liable for technical or editorial errors or omissions contained herein.