More than 15 million tennis fans around the world visited the US Open app and website this year, checking scores, poring over statistics and watching highlights from hundreds of matches over the two weeks of the tournament. To help develop this world-class digital experience, IBM Consulting worked closely with the USTA, developing powerful generative AI models that transform tennis data into insights and original content. Using IBM watsonx, a next-generation AI and data platform, the team built and managed the entire lifecycle of the AI models that produced key app features such as Match Insights and AI Commentary, which used large language models to generate spoken commentary for US Open match highlights. (Click here to learn more about how IBM used watsonx to build the AI models behind the US Open digital experience.) And a team of IBM cybersecurity experts ensured the entire digital operation was safe and secure, ensuring a seamless, uninterrupted experience for fans.

Preparing the surface network

During a typical tournament, the US Open digital platform can be on the receiving end of millions of security attacks. Because a single cybersecurity event can disrupt the digital experience, keeping data safe and networks operational is a top priority.

To do it, the IBM Security team begins work long before the tournament begins, using IBM Security Randori Recon to strengthen cyber defenses across the entire US Open digital network. Like checking for open windows or unlocked doors, this reconnaissance software seeks out any vulnerabilities that may be attractive to hackers, such as expired SSL certificates and outdated copyrights. Additionally, Randori Recon checks third-party vendors and tools used as part of the tournament’s digital experience, some of which can increase the attack surface area of the network and introduce new security risks for the tournament.

Once the tool finds areas at risk, the IBM team works to fix the issues, such as patching vulnerabilities. Because Randori Recon ranks the vulnerabilities, the team knows which issues are the highest priority and need attention first. The IBM team also works with the third parties as needed to make sure their issues are solved before the tournament.

Learn more: IBM at the US Open

Monitoring potential threats in real-time with QRadar

After the tournament begins, the activity picks up both in terms of cybersecurity incidents and monitoring. As with previous tournaments, the IBM team uses IBM Security QRadar for threat detection. The tool uses AI to determine a threat level, triage which incidents need human intervention and even help remediate some issues. For example, the team may decide to shut down a port or analysts may closely monitor a specific IP address based on QRadar recommendations.

To add more context, QRadar uses AI to cross-reference attack data against global threat intelligence databases, like the IBM X-Force Exchange. The tool can correlate seemingly harmless incidents with similar activity that together may constitute a more coordinated, global attack, prompting a much different response.

The future of the US Open

By setting up the workflow and infrastructure with Randori Recon and QRadar, IBM keeps the action focused where it needs to be — on the courts. As the USTA adds new digital features, such as AI Commentary, IBM ensures the necessary processes and technology are in place to protect the overall digital experience.

More from Risk Management

Working in the security clearance world: How security clearances impact jobs

2 min read - We recently published an article about the importance of security clearances for roles across various sectors, particularly those associated with national security and defense.But obtaining a clearance is only part of the journey. Maintaining and potentially expanding your clearance over time requires continued diligence and adherence to stringent guidelines.This brief explainer discusses the duration of security clearances, the recurring processes involved in maintaining them and possibilities for expansion, as well as the economic benefits of these credentialed positions.Duration of security…

Remote access risks on the rise with CVE-2024-1708 and CVE-2024-1709

4 min read - On February 19, ConnectWise reported two vulnerabilities in its ScreenConnect product, CVE-2024-1708 and 1709. The first is an authentication bypass vulnerability, and the second is a path traversal vulnerability. Both made it possible for attackers to bypass authentication processes and execute remote code.While ConnectWise initially reported that the vulnerabilities had proof-of-concept but hadn’t been spotted in the wild, reports from customers quickly made it clear that hackers were actively exploring both flaws. As a result, the company created patches for…

Researchers develop malicious AI ‘worm’ targeting generative AI systems

2 min read - Researchers have created a new, never-seen-before kind of malware they call the "Morris II" worm, which uses popular AI services to spread itself, infect new systems and steal data. The name references the original Morris computer worm that wreaked havoc on the internet in 1988.The worm demonstrates the potential dangers of AI security threats and creates a new urgency around securing AI models.New worm utilizes adversarial self-replicating promptThe researchers from Cornell Tech, the Israel Institute of Technology and Intuit, used what’s…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today