Get started

Get a demo

Hubble Awarded Tech Pioneer by World Economic Forum

Posts

Latest News

Events

Press

Latest Press

Check out our latest content, from articles to press releases and in-depth guides.

This September 19th - 21st, Hubble will be exhibiting at Fal.Con 2022 in  Las Vegas at the Aria Hotel. 
If you’re attending - we would love to meet you there.
9:30 AM to 5 PM – Hubble Rapid Demos.
Join us at the Fal.Con New Innovators Showcase (9N) toward the rear of the hall for a demo of the latest capabilities our award winning platform has to offer.
10 AM - 4PM – Demos and Executive Sessions
Sign up for in-depth product demos and to meet with our leadership team at our entertainment suite in the Aria Hotel.

CrowdStrike Fal.Con 2022

<h2>A Single Source of Truth?</h2>
The internet of late has been buzzing with imagery from the Webb telescope. The images truly conjure a sense awe and act as a reminder of how much we still don’t know about the universe we live in.
 
We of course, take the images on face value, not pausing to contemplate the methods behind the image - an image that in reality, is not a conventional photograph at all, but a digital representation, rendered by a computer based on data compiled data from infrared and other sensors.
 
So, what does all of this have to do with cybersecurity?
<h4>A Matter of Perspective</h4>
The idea of truth seems an increasingly complex one in today’s world of conflicting reporting and outright disinformation. Truth when it comes to asset visibility is a fundamentally important one - and should underpin any effective security and technology programs. Without an accurate map of your domain of responsibility, you can not possibly effectively identify and address risks. Phil Venables, CISO Google Cloud put this incredibly eloquently in his 2021 blog post: <a href="https://www.philvenables.com/post/ciso-archeologist-historian-or-explorer">Archeologist, Historian or Explorer?</a>
 
The trouble is often perspective. For many, the idea of truth, has really evolved into a subset of the whole truth that best fits a narrative that the individual, or group is looking to tell. In the domains of IT, Risk Management and Security, what "good" looks like, or the information that conveys a satisfactory "truth" differs significantly depending who you ask.
<img class=" wp-image-1494" title="ciso-tweet" src="https://hubblecms.wpengine.com/wp-content/uploads/2022/08/ciso-tweet-300x157.png" alt="ciso-tweet" width="373" height="195" />
The above tweet, or messaging like is often used in the [cyber] industry to highlight the conflicting nature of individual sources of asset data. Pretty straightforward, but let’s go deeper and examine why have been going so long, using data that is so obviously flawed. Put yourself into the thought process of the respective owners of the source data and the technologies that generate it.
 
It goes a little something like this. 
<blockquote>
“We understand where the data came from.” 
“We own and understand the technology that collected the data.” 
“We own data and don’t need to ask permission to use it.” 
“The data looks ‘good enough’.”
</blockquote>
These statements are all very subjective and the groups mentioned in the tweet above are functional organizations, often with strong opinions and pride of ownership. If you’ve spent any time in large enterprise environments, you can empathize with how this all came to be. 
 New tech in this area has already seen billions of investments in the United States alone -- but has it moved the needle enough?
 
A single truth for cyber security or more commonly referred to as Cyber Asset Attack Surface Management (CAASM) has become the primary ringleader, with existing categories, to include ASM (Attack Surface Management) coming to play too, often repurposing existing and flawed data sets, with a new presentation layer.
 
Over the years – security teams have become understandably frustrated over IT’s inability to provide a straight answer as to what’s on the network, so the advent of CAASM has been a welcome addition to the market. This has shifted the point of ownership and security teams have become increasingly comfortable with CAASM, with common feedback including: 
<blockquote>
“We understand where the data came from.” 
“We own and understand the technology that collected the data.” 
“We own data and don’t need to ask permission to use it.” 
</blockquote>
Sound familiar?
 
We've shifted the point of ownership and given some fancy names to the tech, but many of the issues remain the same. You might be wondering, is this really a bad thing – or perhaps we’ve moved the needle enough and this is “good enough”.
 
For some use-cases, the answer might be yes – but therein lies the rub. If a technology is largely focused on internal attack surface, or cloud security posture management - the idea of “truth” has been decided for you. Ask yourself this, would you buy a camera that can only take pictures of peoples faces, but not at all of landscapes, or the night sky - when an affordable camera was available that can address all of your current and future needs?
 
So now we're presented with a challenge if you've gone down this path: 
<ul>
 	<li>
<blockquote>We’re led into a false sense of security that we’ve solved the problem. This is particularly an issue where adjacent technologies such as vulnerability management platforms have created “asset dashboards”, which are simply creating new user experiences on top of existing flawed data.</blockquote>
</li>
 	<li>
<blockquote>The data itself is going to remain biased towards the use-cases the vendor is focused the most on.</blockquote>
</li>
 	<li>
<blockquote>Even if the data is there, the user interfaces, workflow automation etc., the product will lack flexibility needed to address future, evolving needs.</blockquote>
</li>
</ul>
<h4>Fragmented Truths</h4>
Our industry is notoriously fragmented. Highly technical founders, often with backgrounds in security ops, vulnerability management or regulatory compliance build software solutions that scratch the itch that is nearest and dearest to them. This background forms their version of truth and as admirable as it might be – often results in the creation of a point solution.
 
In the world of asset visibility, this has added to our Cyber alphabet soup: CAASM, ASM, EASM, CSPM and more! These solutions are absolutely not without merit – and have unquestionably provided a source of “a” truth, in the eyes of the stakeholder that purchased it. But cyber security is a business level issue, and it always has been. The enterprise need asset visibility solutions that both function out of the box, yet provide a flexible platform that allows the representation of data to fit their unique needs.
<h4>The Path Forward</h4>
Edwin Hubble, famously said: "The whole thing is so much bigger than I am, and I can't understand it, so I just trust myself to it; and forget about it." Hubble, was the first to admit that much was unknown about the universe, but dedicated his life to create methods for us to explore the universe more effectively.
 
At Hubble, we make no claim of fully understanding your entire technology universe - but we are passionate about providing you a flexible platform that gives you the foundation on which true, enterprise-wide business resiliency can be achieved.

A Single Source of Truth

This week, Hubble will be attending Blackhat at Las Vegas’ Mandalay Bay.  If you’re attending , we want to meet you there.  Here is a list of the events we will be hosting throughout the week..

<h3>Hubble’s Blackhat Events 2022</h3>
Tuesday and Wednesday Aug. 9 and 10th | 9:30 AM to 5 PM – Hubble Demos.

Visit us at the Agave conference suite in the Four Seasons to see the latest features in our Technology Asset Intelligence Platform - including the launch of our integration between Hubble and Accenture's iDefense intelligence platform. We'll have snacks, coffee, and tea service available too.  Request your meeting <a href="https://calendly.com/gethubble/book-a-blackhat-demo?month=2022-08&date=2022-08-09">here</a> .

Thursday Aug. 11 | 12 PM to 2 PM – VIP Lunch and Intimate Socialization.
By invitation only. Join us before general admission of Hubble’s inaugural Blackhat pool party for lunch and intimate socialization with some of the industries most highly respected CISO's and Cyber Executives..
Thursday Aug. 11 | 2 PM to 6 PM – Hubble’s Inaugural Blackhat Pool Party.
All are welcome to register and join Hubble Technology at Mandalay Bay’s DAYLIGHT Beach Club for our inaugural Blackhat pool party.  An open bar will be offered from 2pm to 4:30 pm and hear live music from Grammy-Nominated DJ Morgan Page. Register to hold your spot through <a href="https://hubbl.la/BH22">this link</a> .

&nbsp;

See you in Vegas!.

&nbsp;

Explore our resources

All resources

Bring complete visibility to your digital assets