Machine learning wards off threats at TV studio Bunim Murray
TV studio Bunim Murray has teamed up with cyber security firm Darktrace. The firm has been in business for 30 years and is known for its reality TV shows. CTO Gabe Cortina says a cyber security breach could have seriously damaged the company.
When the world locked down in the spring of 2020 and millions of people all over the world suddenly had pivot to a culture of semi-permanent remote working, security teams and IT professionals were forced to contend with an equally sudden pivot among cyber criminals to exploiting the pandemic, and the gaping holes many businesses left open in the rush to maintain a semblance of normalcy.

But for California-based television studio Bunim Murray, fears that stressed remote workers would become unwitting victims to cyber threats were allayed thanks to a multi-year partnership with British cyber security wunderkind Darktrace, and the recent adoption of its Antigena Email product – described as a “self-defending” inbox.

While its name is probably little-known to most viewers, Bunim Murray is kind of a big deal in TV. Founded in the late 1980s when two TV producers were flung together to produce a so-called ‘unscripted soap opera’ for the MTV network, the resulting show, The Real World, was instrumental in establishing the reality TV genre. The new company went on to develop global hits including Keeping Up With The Kardashians, Project Runway and The Simple Life.

Bunim Murray’s CTO Gabe Cortina arrived at the firm with the infamous 2014 hack on Sony Pictures weighing on his mind. This incident centred on the release of The Interview, a comedy starring Seth Rogen and James Franco which depicted the fictionalised assassination of North Korean dictator Kim Jong-Un. Likely perpetrated by groups with links to the North Korean state, the large-scale leak of data from the studio caused great embarrassment for many high-profile individuals.

From the get-go, Cortina understood that a similar kind of breach could be seriously damaging to Bunim Murray. “We’ve been in business for 30 years. We have a strong brand and we’re known for delivering high-quality shows,” he tells Computer Weekly.

“We’re always thinking about this because it’s not just about losing control of intellectual property. If there is disruption to the business, a lot of the time we’re basically delivering shows [to networks] the same day they air. So if we have an incident and it takes us three days to recover, that would mean we’re delivering late.”

Within a few weeks of taking up his post, Cortina found himself faced with a cyber security incident. “That was a wake-up-call for our CEO and CFO to do something about security,” he says. “It turned out that we were able to handle the intrusion and it wasn’t a big deal for us, but it could have been more serious.

“At that point, our journey started, and it started with some of the basics of security, just having good policies, good practices and making sure our infrastructure was up to date,” he says. “And as I was starting to progressively build out our security, I heard about machine learning being used more and more in intrusion detection, and Darktrace, believe it or not, cold called me.”

A new security team Cortina arranged a meeting with Darktrace’s sales team, although he concedes he was still a sceptic when it came to realising the benefits of machine learning in security. “I said, ‘What I’d like to do is go through a bake-off with several different products – I’d like to include yours, is it possible I could try it?’. Within a week, we had the Darktrace Immune System inside our datacentre,” he says. “When it turned on it was the first time I’d ever actually seen everything on our network, and over the course of a week and a half it baselined all the activity of all of our users. It was amazing.” Cortina cancelled the bake-off and bought it. “It wasn’t like we just got an appliance or a service, we got the benefit of their entire team. They did a really good job of making sure it was up and running, and because every environment is different the Darktrace team helped us tune the machine learning with models that helped reduce false positives and so forth – so immediately we started getting benefits. “We also use it like a feedback system – as we saw different threat vectors come in, it would give us information on what we needed to do. So not only was it stopping threats, but it was alerting us to potential threats that we could shore up against across our entire platform. “Instead of having to spend a lot of time on security and keep up with everything, it’s just like having a big security team. Darktrace is now our security team, really. “Plus there’s the fact that Darktrace’s machines are actually learning for every installation they do. When they add another customer and other threat factors come in there, Darktrace is basically learning everything that’s going on, so we’re getting the benefit of group knowledge in close to real-time.” But it is since the advent of the Covid-19 pandemic that the relationship has kicked up a notch. Most of Bunim Murray’s applications are SaaS-based, hosted in the cloud, so switching over to remote working was never going to be as big of a challenge as it would have been for an on-premise devotee. But nevertheless, says Cortina, the presence of an automated security service helped ease the process a little bit more. “We’ve built our infrastructure around flexibility and usability, and Darktrace fits right into that sweet spot,” he says. “During that transition, when we were so focused on everybody having the right equipment at home and there was a lot of chaos going on, it was nice not to have to worry about security.”