More than 15 million tennis fans around the world visited the US Open app and website this year, checking scores, poring over statistics and watching highlights from hundreds of matches over the two weeks of the tournament. To help develop this world-class digital experience, IBM Consulting worked closely with the USTA, developing powerful generative AI models that transform tennis data into insights and original content. Using IBM watsonx, a next-generation AI and data platform, the team built and managed the entire lifecycle of the AI models that produced key app features such as Match Insights and AI Commentary, which used large language models to generate spoken commentary for US Open match highlights. (Click here to learn more about how IBM used watsonx to build the AI models behind the US Open digital experience.) And a team of IBM cybersecurity experts ensured the entire digital operation was safe and secure, ensuring a seamless, uninterrupted experience for fans.

Preparing the surface network

During a typical tournament, the US Open digital platform can be on the receiving end of millions of security attacks. Because a single cybersecurity event can disrupt the digital experience, keeping data safe and networks operational is a top priority.

To do it, the IBM Security team begins work long before the tournament begins, using IBM Security Randori Recon to strengthen cyber defenses across the entire US Open digital network. Like checking for open windows or unlocked doors, this reconnaissance software seeks out any vulnerabilities that may be attractive to hackers, such as expired SSL certificates and outdated copyrights. Additionally, Randori Recon checks third-party vendors and tools used as part of the tournament’s digital experience, some of which can increase the attack surface area of the network and introduce new security risks for the tournament.

Once the tool finds areas at risk, the IBM team works to fix the issues, such as patching vulnerabilities. Because Randori Recon ranks the vulnerabilities, the team knows which issues are the highest priority and need attention first. The IBM team also works with the third parties as needed to make sure their issues are solved before the tournament.

Learn more: IBM at the US Open

Monitoring potential threats in real-time with QRadar

After the tournament begins, the activity picks up both in terms of cybersecurity incidents and monitoring. As with previous tournaments, the IBM team uses IBM Security QRadar for threat detection. The tool uses AI to determine a threat level, triage which incidents need human intervention and even help remediate some issues. For example, the team may decide to shut down a port or analysts may closely monitor a specific IP address based on QRadar recommendations.

To add more context, QRadar uses AI to cross-reference attack data against global threat intelligence databases, like the IBM X-Force Exchange. The tool can correlate seemingly harmless incidents with similar activity that together may constitute a more coordinated, global attack, prompting a much different response.

The future of the US Open

By setting up the workflow and infrastructure with Randori Recon and QRadar, IBM keeps the action focused where it needs to be — on the courts. As the USTA adds new digital features, such as AI Commentary, IBM ensures the necessary processes and technology are in place to protect the overall digital experience.

More from Risk Management

4 trends in software supply chain security

4 min read - Some of the biggest and most infamous cyberattacks of the past decade were caused by a security breakdown in the software supply chain. SolarWinds was probably the most well-known, but it was not alone. Incidents against companies like Equifax and tools like MOVEit also wreaked havoc for organizations and customers whose sensitive information was compromised.Expect to see more software supply chain attacks moving forward. According to ReversingLabs' The State of Software Supply Chain Security 2024 study, attacks against the software…

How cyberattacks on grocery stores could threaten food security

4 min read - Grocery store shoppers at many chains recently ran into an unwelcome surprise: empty shelves and delayed prescriptions. In early November, Ahold Delhaize USA was the victim of a cyberattack that significantly disrupted operations at more than 2,000 stores, including Hannaford, Food Lion and Stop and Shop. Specific details of the nature of the attack have not yet been publicly released.Because the attack affected many digital systems, some stores were not able to accept credit/debit cards, while others had to shut…

Taking the fight to the enemy: Cyber persistence strategy gains momentum

4 min read - The nature of cyber warfare has evolved rapidly over the last decade, forcing the world’s governments and industries to reimagine their cybersecurity strategies. While deterrence and reactive defenses once dominated the conversation, the emergence of cyber persistence — actively hunting down threats before they materialize — has become the new frontier. This shift, spearheaded by the United States and rapidly adopted by its allies, highlights the realization that defense alone is no longer enough to secure cyberspace.The momentum behind this…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today