prepare to be breached: how to adapt your security controls to the “new normal”

telling the right storyConfidential © Bloor Research 2015

Introductions

Fran HowarthSenior Analyst with Bloor

Patrick BedwellVP, Product Marketing with AlienVault

telling the right storyConfidential © Bloor Research 2015 telling the right storyConfidential © Bloor Research 2015

Breach victims

“It’s not if, but when and how often”

Three-fold increase

over previous year

Source: PwC/Infosec Europe 2014, Symantec


Smaller firms in danger


Smaller firms vital for the economy

Source: UK Department for Business, Innovation & Skills


Challenges in threat detection for SMEs

Source: Ponemon Institute


A more proactive response

A unified security management platform:

Asset discovery

Vulnerability and threat management

Intrusion detection, threat identification and management

Behavioural monitoring

Security intelligence

Centralised management


Asset discovery


Vulnerability and risk assessment


Threat identification: the role of threat intelligence

Source: InformationWeek


Behavioural monitoring


Technology investments in event of breach

Source: Ponemon Institute


Use of SIEM for security intelligence

Source: InformationWeek


Integrate tools into a single operating console

or dashboard

Maintain a continually updated software

inventory

Use continuous vulnerability monitoring

Complete a hardware inventory

Use network mapping

Incorporate log aggregation and correlation

Take threat intelligence feeds for threat

identification and prioritisationSource: SANS Institute

Recommendations


Expected improvements for incident response

Source: SANS Institute


Advantages of security management platforms

Correlation of data from throughout network

Anomaly detection

Comprehensive visibility

Advanced threat protection

Risk prioritisation

Alerting and monitoring

Customise according to business needs

Demonstrate adherence to policies and controls

Protect sensitive data

Limit exposure to breach disclosure

Reduce risk to business partners and customers

Reduce costs

AlienVault USM

ASSET DISCOVERY• Active Network Scanning

• Passive Network Scanning

• Asset Inventory

• Host-based Software Inventory

VULNERABILITY

ASSESSMENT• Continuous

Vulnerability Monitoring

• Authenticated /

Unauthenticated Active

Scanning

BEHAVIORAL

MONITORING• Log Collection

• Netflow Analysis

• Service Availability

Monitoring

SIEM• SIEM Event Correlation

• Incident Response

THREAT DETECTION• Network IDS

• Host IDS

• File Integrity Monitoring

Integrated, Essential Security Controls

Integrated Threat Intelligence

Including Remediation & Response Guidelines

Coordinated Analysis, Actionable Guidance

OTX + AlienVault Labs

Threat Intelligence Powered by Open Collaboration

Now for some Q&A…

Test Drive AlienVault USM

Download a Free 30-Day Trial

http://www.alienvault.com/free-trial

Try our Interactive Demo Site

http://www.alienvault.com/live-demo-site

Questions?

[email protected]

Twitter: @alienvault