Improve Threat Detection for Education Organizations with AlienVault USM
•Download as PPTX, PDF•
0 likes•1,032 views
Securing your network from threats is a constantly evolving challenge, especially for education organizations where IT security resources are limited. AlienVault has helped many education organizations get the security visbility they need, on a budget. Join us for a special live demo of our AlienVault Unified Security Management (USM) solution, focused specifically on the needs of education organizations. You'll hear first-hand from one of your peers, Matthew J. Frederickson, from Council Rock School District, about how our USM solution has helped him improve threat detection and incident response. We'll also walk through a product demo to show how USM makes it easy to: Discover all IP-enabled assets on your network Identify vulnerabilities like unpatched software or insecure configurations Detect network scans and malware like botnets, trojans & rootkits Speed incident response with built-in remediation guidance for every alert Generate accurate reports for regulatory compliance
Recommended
Recommended
More Related Content
Viewers also liked
Viewers also liked (9)
More from AlienVault
More from AlienVault (14)
Recently uploaded
Recently uploaded (20)
Improve Threat Detection for Education Organizations with AlienVault USM
- 2. To simplify how organizations detect and mitigate threats Enable organizations to benefit from the power of crowd-sourced threat intelligence & unified security AlienVault Vision
- 3. Unified Security Management Platform A single platform for simplified, accelerated threat detection, incident response & policy compliance AlienVault Labs Threat Intelligence Correlation rules and directives written by our AlienVault Labs team and displayed through the USM interface Open Threat Exchange The world’s largest repository of crowd-sourced threat data providing a continuous view of real time threats that may have penetrated the company’s defenses. Unified Security Management
- 5. Customer Success: Council Rock Matthew Frederickson, Director of Information Technology for Council Rock School District 12th largest school district in Pennsylvania (out of 500) • 11,200 students, 1,300 staff • 2 High Schools, 3 Middle Schools, 10 Elementary Schools • 72 square miles • 10 person IT department Key challenges: • Similar external threats that everyone else faces, plus… - “Curious” students who like to see what they can get away with - Budget constraints - Accountable to many stakeholders – school district management, community, teachers, administrators, parents, etc.
- 6. Customer Success: Council Rock Factors for choosing USM: • Started with SANS 20 Critical Security Controls • High visibility into the network with a tool that doesn’t require a lot of care & feeding • Scalable • Measures what matters – out of the box - Communications with known malicious IPs (OTX) - Not overwhelmed with alerts – built-in correlation directives filter the signal from the noise - Alerts when abnormal trends are observed - Weekly threat intelligence updates to alert on emerging threats
- 7. Customer Success: Council Rock Benefits gained using USM: • Identifying scripts brought in via thumb drives to scan network & other mischief from students • Identifying malware distributed via spear-phishing among staff • Alerts for the things that need attention, not overwhelmed with false positives • Comprehensive, customizable reporting • Certainty about what is going on in the network
- 8. ASSET DISCOVERY • Active Network Scanning • Passive Network Scanning • Asset Inventory VULNERABILITY ASSESSMENT • Continuous Vulnerability Monitoring • Authenticated / Unauthenticated Active Scanning BEHAVIORAL MONITORING • Log Collection • Netflow Analysis • Service Availability Monitoring SECURITY INTELLIGENCE/SIEM • SIEM Event Correlation • Incident Response THREAT DETECTION • Network IDS • Host IDS • File Integrity Monitoring USM Platform Integrated, Essential Security Controls
- 9. DEMO
- 10. Headline Avoidance Checklist Integrate tools into a single operating console or dashboard Maintain a continually updated software inventory Use continuous vulnerability monitoring Complete a hardware inventory Use network mapping Incorporate log aggregation and correlation Take threat intelligence feeds for threat identification and prioritization SANS Report: Practical Threat Management for Education Organizations
- 11. Protection on a Budget Four Valuable Questions for SIEM Vendors • How quickly can you get meaningful insights from the SIEM? • How much training is required for staff to use the SIEM? • How easily does the SIEM scale as the organization grows? • Does the SIEM integrate host-based agents, or is it limited to receiving logs from syslog or other forwarders? SANS Report: Practical Threat Management for Education Organizations
- 12. 888.613.6023 ALIENVAULT.COM CONTACT US HELLO@ALIENVAULT.COM Now for some Questions.. Questions? Hello@AlienVault.com Twitter : @alienvault Test Drive AlienVault USM Download a Free 30-Day Trial http://www.alienvault.com/free-trial Check out our 15-Day Trial of USM for AWS https://www.alienvault.com/free-trial/usm-for-aws Try our Interactive Demo Site http://www.alienvault.com/live-demo-site
Editor's Notes
- We are dedicated to providing a simplified security solution that, when coupled with affordable pricing, is the perfect fit for organizations with limited budgets and few in-house resources. AlienVault’ gives smaller IT organizations the ability to accelerate and simplify their threat detection and remediation efforts, as well as regulatory compliance. With our unified, simplified approach, you can go from deployment to insight in less than one day
- Can you tell us a bit about your environment, and the security challenges you were facing when you started looking at USM?
- - Can you tell us about some of the reasons you chose USM over other solutions?
- What are some of the benefits you’ve gained from using USM?
- Message Center – you’ll get a message telling you what new threats can be detected with the weekly threat intelligence updates.