Security Incident and Event Management (SIEM) seems to be reinventing.Managed Detection and Response also debuted in the Hype Cycle on its way up the innovation curve, which I think reflects the expansion of customers interested in these technologies and the recognition that there aren't enough people to do the work.I thought EDR was far more mature and broadly adopted than UEBA, with more successful implementations. In terms of placement, I was surprised to see that EDR is positioned just a skosh ahead of UEBA in the Hype Cycle. Perhaps this was a recognition that EDR hasn't sedimented into the Endpoint Protection Platform as quickly as Gartner originally predicted. Endpoint Detection and Response (EDR) was also added.Perhaps there is still room for innovation and disruption as IT Ops and SecOps jointly embrace DevOps and the cloud. I'm almost surprised Gartner anointed this category, as SOAR is already sedimenting into SIEM.

Security Orchestration, Automation, and Response (SOAR) made its first Hype Cycle appearance at the peak of inflated expectations.I confess this isn't my comfort zone, and this big of a shift toward tangible value means I'm going to go read that section carefully. Software-defined Security took a big leap forward, blowing past the trough to land on the cusp of the slope of enlightenment.In my view, NTA has moved from concept to thought leader adoption, and the next year will see leaders and laggards shake out. Network Traffic Analysis (NTA) advanced in both placement and time horizon – from the peak of expectations to the trough of disillusionment, and from five to 10 years to two to five years.Investments continue only if the surviving providers improve their products to the satisfaction of early adopters.' Since this function seems to be merging rapidly into the SIEM, I question if it will even exist next year. Producers of the technology shake out or fail. User and Entity Behavior Analytics (UEBA) plunged from the peak of inflated expectations toward the bottom of the trough of disillusionment, which is the point, according to Gartner, where 'interest wanes as experiments and implementations fail to deliver.My key takeaways from comparing this year with last are as follows: The Movers: On July 13, 2018, Gartner released the Hype Cycle for Threat-Facing Technologies, 2018. I also get more value from the writeups when I do read them.

Many of the categories are ones I've worked with over the last 15 years, and it's fascinating to see how technologies are faring. When Gartner releases a Hype Cycle or Magic Quadrant, I like to do a compare/contrast with the previous report before I read the write-ups.

Gartner hype cycle 2018