222 80 123 · Incident Containment Analyze & Mitigate Novel Threat Interpretation STAGE 2 ADVANCED...

1
Security Empowers Business For More Information: www.bluecoat.com/ ATPlifecycle Advanced Threat Protection A unified defense is required to securely empower the business Lifecycle Defense engthen hold Z ero-Day Threats Advanced Targeted tacks Initial Intrusion Outbound Connection Initiated Deployment Adware Unknown Malware Spyware Test detecti Rootkits Phishing Attacks Exploits Bootkits Infrast target Research Build on Acquire Find and Organize Accomplices Define Target Cover Tracks and remain undetected Ex trate data ADVANCED PERSISTENT THREATS ADVANCED TARGETED ATTACKS ZERO-DAY THREATS UNKNOWN MALWARE Ongoing Operations Detect & Protect Block All Known Threats STAGE 1 Incident Containment Analyze & Mitigate Novel Threat Interpretation STAGE 2 ADVANCED THREAT PROTECTION STAGE 3 Incident Resolution Investigate & Remediate Breach Threat Profiling & Eradication GLOBAL INTELLIGENCE NETWORK LIFECYCLE DEFENSE THE IMPACT OF ADVANCED THREATS TO YOUR ORGANIZATION Average cost per lost data record from advanced attack more than cost from incidents of insider negligence Average time to discover an advanced persistent threat for a malicious breach Average time to resolution for a malicious breach $ DAYS DAYS % 222 80 123 27 The Post Breach Boom research, Ponemon Institute N= 3,529 in 8 countries. THE LIFECYCLE DEFENSE UNIQUELY DELIVERS: Threat Spectrum Protection: The integrated defense targets all three types of threats targeting enterprises: Known, Unknown and Latent. Threat Intelligence Sharing: Closed loop feedback automatically shares intelligence with other systems in the lifecycle defense to inoculate the organization from future attacks. Protection Efficiency: Intelligence sharing and the conversion of unknown threats into known threats transfers protection to the web gateway and reduces burden on other defenses in the network.

Transcript of 222 80 123 · Incident Containment Analyze & Mitigate Novel Threat Interpretation STAGE 2 ADVANCED...

Page 1: 222 80 123 · Incident Containment Analyze & Mitigate Novel Threat Interpretation STAGE 2 ADVANCED THREAT PROTECTION STAGE 3 Incident Resolution Investigate & Remediate Breach Threat

SecurityEmpowers

Business

For More Information:

www.bluecoat.com/ATPlifecycle

Advanced Threat ProtectionA unified defense is required to securely empower the business

Lifecycle Defense

engthen hold

Zero-DayThreats AdvancedTargeted

tacks

InitialIntrusion

OutboundConnectionInitiated

Deployment

AdwareUnknown

MalwareSpyware

Testdetecti Rootkits

PhishingAttacks

Exploits

Bootkits

Infrast

targetResearchBuild onAcquire

Find andOrganize Accomplices

DefineTargetCover Tracks

and remainundetected

Ex trate

dataADVANCED PERSISTENT THREATSADVANCED TARGETED ATTACKSZERO-DAY THREATSUNKNOWN MALWARE

Ongoing OperationsDetect & ProtectBlock All Known Threats

STAGE

1

Incident ContainmentAnalyze & Mitigate

Novel Threat Interpretation

STAGE

2

ADVANCED THREAT PROTECTION

STAGE

3Incident Resolution

Investigate & Remediate Breach

Threat Profiling & Eradication

GLOBALINTELLIGENCENETWORK

LIFECYCLE DEFENSE

THE IMPACT OF ADVANCED THREATS TO YOUR ORGANIZATION

Average cost per lost data record from advanced attack

more than cost from incidents of insider negligence

Average time to discover anadvanced persistent threat for amalicious breach

Average time to resolution for amalicious breach

$ DAYS DAYS

%

222 80 12327

The

Pos

t Bre

ach

Boo

m re

sear

ch, P

onem

on In

stitu

te N

= 3,

529

in 8

cou

ntrie

s.

THE LIFECYCLE DEFENSE UNIQUELY DELIVERS:Threat Spectrum Protection: The integrated defense targets allthree types of threats targetingenterprises: Known, Unknownand Latent.

Threat Intelligence Sharing: Closed loop feedback automaticallyshares intelligence with other systemsin the lifecycle defense to inoculatethe organization from future attacks.

Protection Efficiency: Intelligence sharing and theconversion of unknown threats intoknown threats transfers protection tothe web gateway and reduces burdenon other defenses in the network.

Network Security, Incident Management, and Insider … · Network Security, Incident Management, and Insider Threats ... 2. Insider Threat Agenda. ... Insider Threat Issue.

Network Security, Incident Management, and Insider … · Network Security, Incident Management, and Insider Threats ... 2. Insider Threat Agenda. ... Insider Threat Issue.

Automation and Orchestration - Harnessing Threat Intelligence for Better Incident Response

Automation and Orchestration - Harnessing Threat Intelligence for Better Incident Response

Cyber threat Intelligence and Incident Response by:-Sandeep Singh

Cyber threat Intelligence and Incident Response by:-Sandeep Singh

INFORMATION TECHNOLOGY SECURITY THREAT MANAGEMENT … · Information technology security threat management combines IT security disciplines of threat detection, incident management,

INFORMATION TECHNOLOGY SECURITY THREAT MANAGEMENT … · Information technology security threat management combines IT security disciplines of threat detection, incident management,

Cognitive Threat AnalyticsTech update - Cisco · Cognitive Threat Analytics (CTA) Confirmed Threats Detected Threats Threat Alerts Incident Response HQ A STIX / TAXII API A A SIEMs:

Cognitive Threat AnalyticsTech update - Cisco · Cognitive Threat Analytics (CTA) Confirmed Threats Detected Threats Threat Alerts Incident Response HQ A STIX / TAXII API A A SIEMs:

OPERATIONALIZING INCIDENT RESPONSE - CDM Media › Kansas_City_Summit_RSA...Cultivate Threat Intelligence for remaining Threat Priorities. 3. Establish IR Plan around your Threat Priorities

OPERATIONALIZING INCIDENT RESPONSE - CDM Media › Kansas_City_Summit_RSA...Cultivate Threat Intelligence for remaining Threat Priorities. 3. Establish IR Plan around your Threat Priorities

Unit 6: Incident Resource ManagementCaption: The Planning "P" illustrates the incident planning process. The leg of the “P” describes the initial response period: Once the incident/threat

Unit 6: Incident Resource ManagementCaption: The Planning "P" illustrates the incident planning process. The leg of the “P” describes the initial response period: Once the incident/threat

THREAT INTELLIGENCE PLATFORM...threat intelligence analysts, incident response (IR), and risk management and vulnerability teams with the curated threat intelligence they need to take

THREAT INTELLIGENCE PLATFORM...threat intelligence analysts, incident response (IR), and risk management and vulnerability teams with the curated threat intelligence they need to take

Enterprise Incident Management - Microsoft · 2017-07-05 · Enterprise Incident Management 1 Enterprise Incident Management (EIM) has taken center stage in the enterprise. Organizations

Enterprise Incident Management - Microsoft · 2017-07-05 · Enterprise Incident Management 1 Enterprise Incident Management (EIM) has taken center stage in the enterprise. Organizations

Leveraging Threat Intelligence In Incident Response/Management€¦ · Securosis — Leveraging Threat Intelligence in Incident Response/Management "3 Cisco (NASDAQ: CSCO) is the

Leveraging Threat Intelligence In Incident Response/Management€¦ · Securosis — Leveraging Threat Intelligence in Incident Response/Management "3 Cisco (NASDAQ: CSCO) is the

222 80 123v2.itweb.co.za/products/blue...Defense-Infographic.pdf · Incident Containment Analyze & Mitigate Novel Threat Interpretation STAGE 2 ADVANCED THREAT PROTECTION STAGE 3

222 80 123v2.itweb.co.za/products/blue...Defense-Infographic.pdf · Incident Containment Analyze & Mitigate Novel Threat Interpretation STAGE 2 ADVANCED THREAT PROTECTION STAGE 3

Adapting Incident Response to Meet the Threat Jeff Schilling Director, Global Incident Response and Digital Forensics SecureWorks.

Adapting Incident Response to Meet the Threat Jeff Schilling Director, Global Incident Response and Digital Forensics SecureWorks.

ICS, SCADA, and Non-Traditional Incident … ICS, SCADA, and Non-Traditional Incident Response Kyle Wilhoit Threat Researcher, Trend Micro

ICS, SCADA, and Non-Traditional Incident … ICS, SCADA, and Non-Traditional Incident Response Kyle Wilhoit Threat Researcher, Trend Micro

Automated Threat Intelligence and Response - go.demisto.com · USE CASE #1 AUTOMATED THREAT ENRICHMENT AND RESPONSE Challenge: The disparate nature of threat intelligence and incident

Automated Threat Intelligence and Response - go.demisto.com · USE CASE #1 AUTOMATED THREAT ENRICHMENT AND RESPONSE Challenge: The disparate nature of threat intelligence and incident

Leveraging Threat Intelligence for Cyber Security in · PDF fileCorrelate incident and threat indicators to the associated threat context to inform impact value and prioritization.

Leveraging Threat Intelligence for Cyber Security in · PDF fileCorrelate incident and threat indicators to the associated threat context to inform impact value and prioritization.

Threat Detection and Incident Response: What's New for 2014

Threat Detection and Incident Response: What's New for 2014

(Insert Pictures) · Web view*1. Incident Name: 2. Incident Number: Additional Incident Decision Support Information (continued) 38. Current Incident Threat Summary and Risk Information

(Insert Pictures) · Web view*1. Incident Name: 2. Incident Number: Additional Incident Decision Support Information (continued) 38. Current Incident Threat Summary and Risk Information

The Inevitable Cyber Attack: From Observation to …...Analytics SOC Implementation Methodology SOC FOCUS Threat Monitoring and Operations Threat Protection Intelligence & Incident

The Inevitable Cyber Attack: From Observation to …...Analytics SOC Implementation Methodology SOC FOCUS Threat Monitoring and Operations Threat Protection Intelligence & Incident

Incident Overview & Bomb Threat Protocols and Protective ...20Threat... · Threat poses minimum risk to victim and public safety. ... • Doesn’t correlate to a received threat

Incident Overview & Bomb Threat Protocols and Protective ...20Threat... · Threat poses minimum risk to victim and public safety. ... • Doesn’t correlate to a received threat

Specification of the IT threat detection system · cost-effective way. It will promote new technologies and novel approaches to enhance threat prevention, threat detection, incident

Specification of the IT threat detection system · cost-effective way. It will promote new technologies and novel approaches to enhance threat prevention, threat detection, incident