Cyber Defense eMagazine May 2019

More documents

Recommendations

Info

cybersecurity perspective. Automation ensures consistency and allows the operational status and cybersecurity profile of every connected device to be known. Security Orchestration, Automation and Response While security orchestration, automation and response (SOAR) solutions might traditionally be marketed for enterprise IT environments, cloud computing environments that support IIoT devices pose similar privacy and cybersecurity challenges. SOAR solutions can be easily applied as a centralized way to manage a fleet of IIoT devices to ensure that they are always in their best possible state from a cybersecurity perspective. SOAR solutions can also help with the tedious chore of fleet inventory management, identifying new devices as they come online and deploying appropriate cybersecurity hardening steps. Additionally, SOAR supports a number of key functions in the security operations center (SOC) to help organizations work smarter, respond faster and strengthen their defenses. Automation enables cybersecurity teams to work smarter by executing previously time-consuming actions across the IIoT environment in seconds, turning what could be impossible into an easy task. A SOAR platform can provide orchestration integration across applications and APIs, enabling cybersecurity professionals to connect and coordinate complex workflows across teams and tools. Events can be aggregated and escalated to cases, which makes them easy to track, then cybersecurity teams can rapidly triage those incidents in an automated, semi-automated or manual fashion. SOAR dashboards combine all the critical information needed to understand the current state of cybersecurity operations and help SecOps teams increase situational awareness and drive efficient communications. In many IIoT environments, there are tangible life-safety risks where managing cybersecurity though SOAR solutions becomes essential. Consider failing runway lights in an airfield as an example. As an airline pilot prepares for landing, he and his crew don’t have time to prioritize alerts to understand what’s going on, and nor does air traffic control. Consequently, there must be a system in place that automatically restores those lights so that he can land the plane safely. SOAR platforms provide a highly integrated, automated response that addresses these types of situations. While the convergence of IT and IIoT networks has created a number of challenges for cybersecurity teams, automation and orchestration technologies have the potential to enable cybersecurity operations professionals to respond to the inevitable challenges ahead. The benefits of SOAR include consistent execution of complex workflows comprised of human and machine-driven actions, as well as an auditable system of record for all these processes, providing the basis for analytics and improvement in the rapidly growing IIoT enhanced world. 30
About the Authors Cody Cornell is the CEO of the Swimlane. He is responsible for the overall strategic direction of Swimlane and their SOAR platform. As an advocate for the open exchange of security information and deep technology integration, he constantly strives to enable organizations to maximize the value of their investments in security technology and staff. Cody began his career in the U.S. Coast Guard and has spent 15 years in IT and security including roles with the U.S. <strong>Defense</strong> Information Systems Agency, the Department of Homeland Security (DHS), American Express and IBM Global Business Services. He has also had the pleasure of presenting at information security at forums such as the U.S. Secret Service Electronic Crimes Task Force, the DHS Security Subcommittee on Privacy and National Public Radio. Cody can be reached online at cody.cornell@swimlane.com, @codycornell on Twitter and at our company website http://www.swimlane.com/. About Swimlane Swimlane is at the forefront of the growing market of security automation, orchestration and response (SOAR) solutions and was founded to deliver scalable and flexible security solutions to organizations struggling with alert fatigue, vendor proliferation and chronic staffing shortages. Swimlane’s solution helps organizations address all security operations (SecOps) needs, including prioritizing alerts, orchestrating tools and automating the remediation of threats—improving performance across the entire organization. Swimlane is headquartered in Denver, Colorado with operations throughout North America and Europe. For more information, visit www.Swimlane.com. Trent R. Hein is Co-CEO at Rule4, a boutique professional services firm specializing in cybersecurity and emerging technology. A serial entrepreneur, Trent is passionate about building businesses that have a positive impact on employees, clients, the community, and the world. Bedrock to all his ventures is helping clients maximize their IT investment in the areas of security, performance, and availability. Trent holds a B.S. in computer science (CS) from the University of Colorado at Boulder. He is a co-author of the Unix and Linux System Administration Handbook, currently in its fifth edition. Learn more about Trent at Rule4 or find him on Twitter @trenthein. About Rule4 Rule4 is a global professional services firm that provides practical, real-world knowledge and solutions. Having the right expertise available at the right time is essential, and we’re here to help make that a reality. Rule4 provides cybersecurity and emerging technology expertise for every organization. We follow the spirit of Asimov's fourth rule as we help organizations apply technology in efficient, secure ways that benefit and protect humankind and our planet. Rule4 has Certified B Corp Pending status, which means we put people before profit, always. 31
Page 1 and 2: 5 Reasons Why Cloud Security is Imp
Page 3 and 4: Data Sniffing is Threatening Your P
Page 5 and 6: CEO, Cyber Defense Media Group Publ
Page 7 and 8: 7
Page 9 and 10: 9
Page 11 and 12: 11
Page 13 and 14: 13
Page 15 and 16: Your website could be vulnerable to
Page 17 and 18: 17
Page 19 and 20: Cloud computing helps organizations
Page 21 and 22: the day, if the customer data store
Page 23 and 24: 8 Cybersecurity Practices In Health
Page 25 and 26: V. Amplified M&A activities in the
Page 27 and 28: 7. Maintain Compliance with HIPAA T
Page 29: Whether it’s malicious outsiders
Page 33 and 34: altered. And with the decentralized
Page 35 and 36: Simplifying Cybersecurity Deploymen
Page 37 and 38: If you do not want Alert Logic auto
Page 39 and 40: Backups like The Last Resort The im
Page 41 and 42: About the Author Pedro Tavares is a
Page 43 and 44: Legacy Infrastructure Legacy infras
Page 45 and 46: Enterprise Insider Threats on The R
Page 47 and 48: Your Security Teams are Destroying
Page 49 and 50: Using Behavior to Detect Complete A
Page 51 and 52: Ivanti Priorities this month:
Page 53 and 54: Phishing Awareness - The More They
Page 55 and 56: ecognized leader for security aware
Page 57 and 58: On Security and Privacy, States Are
Page 59 and 60: This federal push will not be a sil
Page 61 and 62: miniature bridges - an email can cr
Page 63 and 64: Network Traffic Analysis (NTA) By T
Page 65 and 66: Traffic Analysis Engine These are t
Page 67 and 68: The Internet of Things Signal Trans
Page 69 and 70: oth - convenience and security of t
Page 71 and 72: 4. Cloud and Speed: Companies that
Page 73 and 74: Two Steps on - One Step Back By Mil
Page 75 and 76: Always Take Care about Your Trainin
Page 77 and 78: CTI in some way, which is an increa
Page 79 and 80: would show that it’s so hard to a
Page 81 and 82:
It’s All About The Logs Looking i
Page 83 and 84:
A well designed and properly implem
Page 85 and 86:
Salaries have significantly grown i
Page 87 and 88:
Let’s take a look into a kid’s
Page 89 and 90:
What happened then? This destroys a
Page 91 and 92:
Opt Parental Controls for all your
Page 93 and 94:
“Standards-based cybersecurity ri
Page 95 and 96:
the de facto security standard simi
Page 97 and 98:
About the Authors Dan Jetton is the
Page 99 and 100:
According to KPMG’s Global Sector
Page 101 and 102:
Data Sniffing is Threatening Your P
Page 103 and 104:
About the Author William J. Tomlins
Page 105 and 106:
if the line meets the acceptable le
Page 107 and 108:
Is Your Encryption Flexible Enough?
Page 109 and 110:
to other chat apps is geometric, an
Page 111 and 112:
The Critical Role TAPs Play in Netw
Page 113 and 114:
About the Author Alastair Hartrup i
Page 115 and 116:
Thanks to these attacks, the demand
Page 117 and 118:
Why CIOs/CISO’s Positions Are Bec
Page 119 and 120:
slowly to how they would normally.
Page 121 and 122:
Over time, as operators compile mul
Page 123 and 124:
QIDs from associated metadata, the
Page 125 and 126:
125
Page 127 and 128:
127
Page 129 and 130:
129
Page 131 and 132:
131
Page 133 and 134:
133
Page 135 and 136:
135
Page 137 and 138:
137
Page 139 and 140:
139
Page 141 and 142:
141
Page 143 and 144:
143
Page 145 and 146:
145
Page 147 and 148:
147
Page 149 and 150:
149
Page 151 and 152:
You asked, and it’s finally here
Page 153 and 154:
Marketing and Partnership Opportuni
Page 155 and 156:
Regent University’s Institute for
Page 157 and 158:
157
Page 159 and 160:
159
show all

Cyber Defense eMagazine May 2019

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?