Anton Chuvakin on Security Data Centralization

•

3 j'aime•1,311 vues

Anton Chuvakin

My old preso on data centralization; I might not agree with everything I said back then ...

Technologie

Centralizing Centralization v. 0.2 October 2003 Anton Chuvakin, Ph.D., GCIA, GCIH Senior Security Analyst

Outline ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Terms ,[object Object],[object Object],[object Object],[object Object],[object Object]

Centralization ,[object Object],[object Object],[object Object],[object Object],[object Object]

Security Data Overview ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Centralized Data ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Requirements ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Challenges ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Case Made! So... ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Case I: NIDS Console ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Example: ACID Console ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Case II: Desktop Protection ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Diverse devices ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Normalization Defined ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Normalization ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Categorization ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Value of Categorization ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Correlation ,[object Object],[object Object],[object Object],[object Object]

Correlation Types ,[object Object],[object Object],[object Object],[object Object]

Policy, Vulnerability and Incident Management ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Conclusion ,[object Object],[object Object],[object Object],[object Object],[object Object]

Thanks for Viewing the Presentation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Recommandé

Finding Your Lost Keystrueidentity

Extending applications securely to wireless health workers.Wheatstone

The CISO’s Guide to Data Loss PreventionDigital Guardian

Data Loss Prevention from SymantecArrow ECS UK

Be Aware Webinar Symantec-Maxímice su prevención hacia la fuga de la informaciónSymantec LATAM

Comprehensive Data Leak PreventionTanvir Hashmi

Cybersercurity Resource Allocation & Efficacy Index: 2020 - 2021 TrendsIvanti

Shariyaz abdeen data leakage prevention presentationShariyaz Abdeen

Recommandé

Finding Your Lost Keystrueidentity

Extending applications securely to wireless health workers.Wheatstone

The CISO’s Guide to Data Loss PreventionDigital Guardian

Data Loss Prevention from SymantecArrow ECS UK

Be Aware Webinar Symantec-Maxímice su prevención hacia la fuga de la informaciónSymantec LATAM

Comprehensive Data Leak PreventionTanvir Hashmi

Cybersercurity Resource Allocation & Efficacy Index: 2020 - 2021 TrendsIvanti

Shariyaz abdeen data leakage prevention presentationShariyaz Abdeen

DLP Data leak preventionAriel Evans

apsec 7 Golden Rules Data Leakage Prevention / DLPandreasschuster

IT Service & Asset Management Better TogetherIvanti

Symantec DLP for TabletSymantec

SANS Critical Security Controls Summit London 2013Wolfgang Kandek

MYTHBUSTERS: Can You Secure Payments in the Cloud?Kurt Hagerman

Dlp notesanuepcet

The Future of Technology OperationsIvanti

Information and Identity Protection - Data Loss Prevention, Encryption, User ...Symantec APJ

Introducing Data Loss Prevention 14Symantec

Symantec Data Loss Prevention - Technical Proposal (General)Iftikhar Ali Iqbal

#MFSummit2016 Secure: How Security and Identity Analytics can Drive Adaptive ...Micro Focus

Alex Hanway - Securing the Breach: Using a Holistic Data Protection Frameworkcentralohioissa

Shadow Data ExposedElastica Inc.

Enterprise API Security & Data Loss Prevention - IntelIntel - API Security & Tokenization

Symantec Data Loss Prevention 11Symantec

Data Leakage PresentationMike Spaulding

Data Leakage Prevention Dhananjay Aloorkar

How Network Data Loss Prevention is ImplementedJerry Paul Acosta

Data Security: Why You Need Data Loss Prevention & How to Justify ItMarc Crudgington, MBA

Housing trends update april2010Randy Poll

Extending the Aquarius Data Acquisition, Analysis & Notification SystemsHatfield Consultants

Contenu connexe

Tendances

DLP Data leak preventionAriel Evans

apsec 7 Golden Rules Data Leakage Prevention / DLPandreasschuster

IT Service & Asset Management Better TogetherIvanti

Symantec DLP for TabletSymantec

SANS Critical Security Controls Summit London 2013Wolfgang Kandek

MYTHBUSTERS: Can You Secure Payments in the Cloud?Kurt Hagerman

Dlp notesanuepcet

The Future of Technology OperationsIvanti

Information and Identity Protection - Data Loss Prevention, Encryption, User ...Symantec APJ

Introducing Data Loss Prevention 14Symantec

Symantec Data Loss Prevention - Technical Proposal (General)Iftikhar Ali Iqbal

#MFSummit2016 Secure: How Security and Identity Analytics can Drive Adaptive ...Micro Focus

Alex Hanway - Securing the Breach: Using a Holistic Data Protection Frameworkcentralohioissa

Shadow Data ExposedElastica Inc.

Enterprise API Security & Data Loss Prevention - IntelIntel - API Security & Tokenization

Symantec Data Loss Prevention 11Symantec

Data Leakage PresentationMike Spaulding

Data Leakage Prevention Dhananjay Aloorkar

How Network Data Loss Prevention is ImplementedJerry Paul Acosta

Data Security: Why You Need Data Loss Prevention & How to Justify ItMarc Crudgington, MBA

Tendances (20)

DLP Data leak prevention

apsec 7 Golden Rules Data Leakage Prevention / DLP

IT Service & Asset Management Better Together

Symantec DLP for Tablet

SANS Critical Security Controls Summit London 2013

MYTHBUSTERS: Can You Secure Payments in the Cloud?

Dlp notes

The Future of Technology Operations

Information and Identity Protection - Data Loss Prevention, Encryption, User ...

Introducing Data Loss Prevention 14

Symantec Data Loss Prevention - Technical Proposal (General)

#MFSummit2016 Secure: How Security and Identity Analytics can Drive Adaptive ...

Alex Hanway - Securing the Breach: Using a Holistic Data Protection Framework

Shadow Data Exposed

Enterprise API Security & Data Loss Prevention - Intel

Symantec Data Loss Prevention 11

Data Leakage Presentation

Data Leakage Prevention

How Network Data Loss Prevention is Implemented

Data Security: Why You Need Data Loss Prevention & How to Justify It

En vedette

Housing trends update april2010Randy Poll

Extending the Aquarius Data Acquisition, Analysis & Notification SystemsHatfield Consultants

Prachi p.p.tNeelam Rajpal

Statistika deskriptifAngga Debby Frayudha

DID YOU KNOW...?MozzWear

el problema que hi ha actualment amb la pescaguestf5671150

Angel almeidaAngel Almeida

A arquitetura política dentro da cidade constitucionalKarine Lopes

ESSHBS-15-179MOHAMED EL HACEN SIDI

LIBRARY Mohammed Salah

En vedette (10)

Housing trends update april2010

Extending the Aquarius Data Acquisition, Analysis & Notification Systems

Prachi p.p.t

Statistika deskriptif

DID YOU KNOW...?

el problema que hi ha actualment amb la pesca

Angel almeida

A arquitetura política dentro da cidade constitucional

ESSHBS-15-179

LIBRARY

Similaire à Anton Chuvakin on Security Data Centralization

Overall Security Process Review CISC 6621Agend.docxkarlhennesey

First Responders Course - Session 3 - Monitoring and Controlling Incident CostsPhil Huggins FBCS CITP

Security Event Analysis Through CorrelationAnton Chuvakin

Events Management or How to Survive Security Incidentsguest6fd3c2f9

Belnet events managementXavier Mertens

Anton Chuvakin on Threat and Vulnerability IntelligenceAnton Chuvakin

Zentral combine power of osquery_santaHenry Stamerjohann

What Every Organization Should Log And MonitorAnton Chuvakin

Honeypots for Cloud Providers - SDN World CongressVallie Joseph

Data Security Solutions @ISACA LV Chapter Meeting 15.05.2013 SIEM based …Andris Soroka

Take back your security infrastructureAnton Chuvakin

FireEye: Seamless Visibility and Detection for the CloudAmazon Web Services

Addressing Gaps in Your Cyber Security NextLabs, Inc.

Six Steps to SIEM SuccessAlienVault

SOC presentation- Building a Security Operations CenterMichael Nickle

Security Analytics for Data Discovery - Closing the SIEM GapEric Johansen, CISSP

Changing the Security Monitoring Status QuoEMC

Enterprise incident response 2017zapp0

Prezentare_ANSSI.pptx gfdsry crsru drdrsyAzim191210

Ca world 2007 SOC integrationMichael Nickle

Similaire à Anton Chuvakin on Security Data Centralization (20)

Overall Security Process Review CISC 6621Agend.docx

First Responders Course - Session 3 - Monitoring and Controlling Incident Costs

Security Event Analysis Through Correlation

Events Management or How to Survive Security Incidents

Belnet events management

Anton Chuvakin on Threat and Vulnerability Intelligence

Zentral combine power of osquery_santa

What Every Organization Should Log And Monitor

Honeypots for Cloud Providers - SDN World Congress

Data Security Solutions @ISACA LV Chapter Meeting 15.05.2013 SIEM based …

Take back your security infrastructure

FireEye: Seamless Visibility and Detection for the Cloud

Addressing Gaps in Your Cyber Security

Six Steps to SIEM Success

SOC presentation- Building a Security Operations Center

Security Analytics for Data Discovery - Closing the SIEM Gap

Changing the Security Monitoring Status Quo

Enterprise incident response 2017

Prezentare_ANSSI.pptx gfdsry crsru drdrsy

Ca world 2007 SOC integration

Plus de Anton Chuvakin

Future of SOC: More Security, Less OperationsAnton Chuvakin

SOC Meets Cloud: What Breaks, What Changes, What to Do?Anton Chuvakin

Meet the Ghost of SecOps Future by Anton ChuvakinAnton Chuvakin

SANS Webinar: The Future of Log Centralization for SIEMs and DFIR – Is the En...Anton Chuvakin

SOC Lessons from DevOps and SRE by Anton ChuvakinAnton Chuvakin

Hey SOC, Look LEFT! by Anton Chuvakin RSA 2023 BoothAnton Chuvakin

20 Years of SIEM - SANS Webinar 2022Anton Chuvakin

10X SOC - SANS Blue Summit Keynote 2021 - Anton ChuvakinAnton Chuvakin

SOCstock 2020 Groovy SOC Tunes aka Modern SOC TrendsAnton Chuvakin

SOCstock 2021 The Cloud-native SOC Anton Chuvakin

Modern SOC Trends 2020Anton Chuvakin

Anton's 2020 SIEM Best and Worst Practices - in BriefAnton Chuvakin

Generic siem how_2017Anton Chuvakin

Tips on SIEM Ops 2015Anton Chuvakin

Five SIEM Futures (2012)Anton Chuvakin

RSA 2016 Security Analytics PresentationAnton Chuvakin

Five Best and Five Worst Practices for SIEM by Dr. Anton ChuvakinAnton Chuvakin

Practical Strategies to Compliance and Security with SIEM by Dr. Anton ChuvakinAnton Chuvakin

SIEM Primer:Anton Chuvakin

Plus de Anton Chuvakin (20)

Future of SOC: More Security, Less Operations

SOC Meets Cloud: What Breaks, What Changes, What to Do?

Meet the Ghost of SecOps Future by Anton Chuvakin

SANS Webinar: The Future of Log Centralization for SIEMs and DFIR – Is the En...

SOC Lessons from DevOps and SRE by Anton Chuvakin

Hey SOC, Look LEFT! by Anton Chuvakin RSA 2023 Booth

20 Years of SIEM - SANS Webinar 2022

10X SOC - SANS Blue Summit Keynote 2021 - Anton Chuvakin

SOCstock 2020 Groovy SOC Tunes aka Modern SOC Trends

SOCstock 2021 The Cloud-native SOC

Modern SOC Trends 2020

Anton's 2020 SIEM Best and Worst Practices - in Brief

Generic siem how_2017

Tips on SIEM Ops 2015

Five SIEM Futures (2012)

RSA 2016 Security Analytics Presentation

Five Best and Five Worst Practices for SIEM by Dr. Anton Chuvakin

Practical Strategies to Compliance and Security with SIEM by Dr. Anton Chuvakin

SIEM Primer:

Dernier

DevEX - reference for building teams, processes, and platformsSergiu Bodiu

"ML in Production",Oleksandr BaganFwdays

WordPress Websites for Engineers: Elevate Your Brandgvaughan

Designing IA for AI - Information Architecture Conference 2024Enterprise Knowledge

Powerpoint exploring the locations used in television show Time Clashcharlottematthew16

Streamlining Python Development: A Guide to a Modern Project SetupFlorian Wilhelm

Take control of your SAP testing with UiPath Test SuiteDianaGray10

Dev Dives: Streamline document processing with UiPath Studio WebUiPathCommunity

Story boards and shot lists for my a level piececharlottematthew16

Gen AI in Business - Global Trends Report 2024.pdfAddepto

DSPy a system for AI to Write Prompts and Do Fine TuningLars Bell

The Ultimate Guide to Choosing WordPress Pros and ConsPixlogix Infotech

Leverage Zilliz Serverless - Up to 50X Saving for Your Vector Storage CostZilliz

Unraveling Multimodality with Large Language Models.pdfAlex Barbosa Coqueiro

Scanning the Internet for External Cloud Exposures via SSL CertsRizwan Syed

"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek SchlawackFwdays

Unleash Your Potential - Namagunga Girls Coding ClubKalema Edgar

Developer Data Modeling Mistakes: From Postgres to NoSQLScyllaDB

H2O.ai CEO/Founder: Sri Ambati Keynote at Wells Fargo DaySri Ambati

How to write a Business Continuity PlanDatabarracks

Dernier (20)

DevEX - reference for building teams, processes, and platforms

"ML in Production",Oleksandr Bagan

WordPress Websites for Engineers: Elevate Your Brand

Designing IA for AI - Information Architecture Conference 2024

Powerpoint exploring the locations used in television show Time Clash

Streamlining Python Development: A Guide to a Modern Project Setup

Take control of your SAP testing with UiPath Test Suite

Dev Dives: Streamline document processing with UiPath Studio Web

Story boards and shot lists for my a level piece

Gen AI in Business - Global Trends Report 2024.pdf

DSPy a system for AI to Write Prompts and Do Fine Tuning

The Ultimate Guide to Choosing WordPress Pros and Cons

Leverage Zilliz Serverless - Up to 50X Saving for Your Vector Storage Cost

Unraveling Multimodality with Large Language Models.pdf

Scanning the Internet for External Cloud Exposures via SSL Certs

"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack

Unleash Your Potential - Namagunga Girls Coding Club

Developer Data Modeling Mistakes: From Postgres to NoSQL

H2O.ai CEO/Founder: Sri Ambati Keynote at Wells Fargo Day

How to write a Business Continuity Plan

Anton Chuvakin on Security Data Centralization

1. Centralizing Centralization v. 0.2 October 2003 Anton Chuvakin, Ph.D., GCIA, GCIH Senior Security Analyst

10.

11.

12.

13.

14.

15. Normalization Example

16.

17.

18.

19.

20.

21.

22.

23.