Securing the Telemetry Analysis Workstation

Abstract

Telemetry data must travel a great distance before it can be analyzed by scientists and engineers. While each venue the telemetry data travels through (e.g. open air, physical/wireless networks, etc.) opens some opportunity for potential compromise; probably the greatest risk arises at the telemetry analyst’s workstation. Scientists and engineers accessing and analyzing the telemetry data have little exposure to cybersecurity training—making their workstation a potential data loss threat point. However, deployment of managed endpoint protection cybersecurity tools at the analysis workstation can substantially mitigate this risk. After reviewing the endpoint threat landscape, four classes of cybersecurity tools (endpoint detection/response, vulnerability management, application control, and event management) will be discussed; which, when deployed in tandem, can provide substantial protection for analysis workstation environments.