Managed Securty Monitoring

Embed Size (px)

Citation preview

  • 8/7/2019 Managed Securty Monitoring

    1/18

    0DQDJHG6HFXULW\0RQLWRULQJ1HWZRUN6HFXULW\IRUWKHVW&HQWXU\

    %UXFH6FKQHLHU

    &RS\ULJKWE\&RXQWHUSDQH,QWHUQHW6HFXULW\,QF$OOULJKWVUHVHUYHG

  • 8/7/2019 Managed Securty Monitoring

    2/18

    0DQDJHG6HFXULW\0RQLWRULQJ 3DJH

    ,QWURGXFWLRQ

    7KH,QWHUQHWLVFULWLFDOWREXVLQHVV&RPSDQLHVKDYHQRFKRLFHEXWWRFRQQHFWWKHLULQWHUQDOQHWZRUNVWRWKHUHVWRIWKHZRUOGWROLQNZLWKFXVWRPHUVVXSSOLHUVSDUWQHUVDQGWKHLURZQHPSOR\HHV%XWZLWKWKDWFRQQHFWLRQFRPHVQHZWKUHDWVPDOLFLRXVKDFNHUVFULPLQDOVLQGXVWULDOVSLHV7KHVHQHWZRUNSUHGDWRUVUHJXODUO\VWHDOFRUSRUDWHDVVHWVDQGLQWHOOHFWXDOSURSHUW\FDXVHVHUYLFHEUHDNVDQGV\VWHPIDLOXUHVVXOO\FRUSRUDWHEUDQGVDQGIULJKWHQFXVWRPHUV8QOHVVFRPSDQLHVFDQVXFFHVVIXOO\QDYLJDWHDURXQGWKHPWKH\ZLOOQRWEHDEOHWRXQORFNWKHIXOOEXVLQHVVSRWHQWLDORIWKH,QWHUQHW

    7UDGLWLRQDODSSURDFKHVWRFRPSXWHUVHFXULW\GRQWZRUN'HVSLWHGHFDGHVRIUHVHDUFKDQGKXQGUHGVRIDYDLODEOHVHFXULW\SURGXFWVWKH,QWHUQHWKDVVWHDGLO\EHFRPHPRUHGDQJHURXV7KHLQFUHDVHGFRPSOH[LW\RIWKH,QWHUQHWDQGLWVDSSOLFDWLRQVWKHUXVKWRSXWPRUHVHUYLFHVDQGSHRSOHRQWKH,QWHUQHWDQGWKHGHVLUHWRLQWHUFRQQHFWHYHU\WKLQJDOOFRQWULEXWHWRWKHLQFUHDVHGLQVHFXULW\RIWKHGLJLWDOZRUOG

    6HFXULW\EDVHGRQSURGXFWVLVLQKHUHQWO\IUDJLOH1HZO\

    GLVFRYHUHGDWWDFNVWKHSUROLIHUDWLRQRIDWWDFNWRROVDQGIODZVLQWKHSURGXFWVWKHPVHOYHVDOOUHVXOWLQDQHWZRUNEHFRPLQJYXOQHUDEOHDWUDQGRPDQGLQFUHDVLQJO\IUHTXHQWLQWHUYDOV

    5HDOVHFXULW\LVDERXWSHRSOH2QWKHGD\\RXUHDWWDFNHGLWGRHVQWPDWWHUKRZ\RXUQHWZRUNLVFRQILJXUHGZKDWNLQGRIER[HV\RXKDYHRUKRZPDQ\VHFXULW\GHYLFHV\RXYHLQVWDOOHG:KDWPDWWHUVLVZKRLVGHIHQGLQJ\RX7KHRQO\ZD\WRVWD\DKHDGRIQHZ

    YXOQHUDELOLWLHVDQGDWWDFNVLVWKURXJKGHWHFWLRQDQGUHVSRQVH,QWKHUHDOZRUOGWKLVWUDQVODWHVWRDODUPV\VWHPVDQGJXDUGV2QWKH,QWHUQHWWKLVPHDQVDFWLYHQHWZRUNPRQLWRULQJ

  • 8/7/2019 Managed Securty Monitoring

    3/18

    3DJH %UXFH6FKQHLHU

    NQRZOHGJHLVXQPDWFKHG2XUWHFKQRORJ\DQGPDQDJHPHQWWHDPVUHSUHVHQWDYLUWXDO:KRV:KRRIWKHLQIRUPDWLRQVHFXULW\LQGXVWU\$QGRXUVHFXULW\DQD

    O\VWVDUHSHRSOHZKRVHGHPHDQRUDQGGLVFLSOLQHPDNHWKHPXQLTXHO\VXLWHGWRDMREZKHUHWKHUHLVQRVODFN7KH\DUHKLJKO\WUDLQHGFRQVWDQWO\GULOOHGDQGXQLTXHO\TXDOLILHG7KH\XQGHUVWDQGWKHQHHGWRSURWHFWEXVLQHVVDVVHWVDQGDUHUHOHQWOHVVLQWKHLUSXUVXLWRIVHFXULW\

    &RXQWHUSDQHVDQDO\VWVZRUNRXWRIRXU6HFXUH2SHUDWLRQV&HQWHUV62&VSK\VLFDOO\DQGYLUWXDOO\KDUGHQHGFRPSXWLQJIDFLOLWLHV7KHVHQHUYHFHQWHUVDUHVWDIIHG

    [DQGKRXVHWKHWHFKQRORJ\DQGSHRSOHWKDWPDNH&RXQWHUSDQHV060VXFFHVVIXO2XU6RFUDWHVLQIRUPDWLRQV\VWHPSURYLGHVRXUDQDO\VWVZLWKWKHLQIRUPDWLRQWKH\QHHGWRPDNHHIIHFWLYHVHFXULW\GLDJQRVHVDQGWDNHFRUUHFWLYHDFWLRQIDVW2XU1HWZRUN,QWHOOLJHQFHRUJDQL]DWLRQFRQWLQXDOO\XSGDWHVRXUV\VWHPZLWKLQIRUPDWLRQRQWKHODWHVWWKUHDWVYXOQHUDELOLWLHVDQGKDFNHUWRROV:HKDYHQRSURGXFWYHQGRURUSROLWLFDOELDV1RRWKHUVHUYLFHFDQPDWFK&RXQWHUSDQHVEUHDGWKRIFRYHUDJHGHSWKRIH[SHUWLVHDQGFRPPLWPHQWWRLQWHJULW\

    6HFXULW\PRQLWRULQJLVDNH\FRPSRQHQWPLVVLQJLQPRVWQHWZRUNV0RQLWRULQJSURYLGHVLPPHGLDWHIHHGEDFNUHJDUGLQJWKHHIILFDF\RIDQHWZRUNVVHFXULW\LQUHDOWLPHDVLWFKDQJHVLQWKHIDFHRIQHZDWWDFNVQHZWKUHDWVVRIWZDUHXSGDWHVDQGUHFRQILJXUDWLRQV0RQLWRULQJLVWKHZLQGRZLQWRDQHWZRUNVVHFXULW\ZLWKRXWLWDVHFXULW\DGPLQLVWUDWRULVIO\LQJEOLQG:KHUHYHUDQHWZRUNLVLQWKHSURFHVVRIEXLOGLQJVHFXULW\PRQLWRULQJLVFULWLFDO,WVWKHILUVWWKLQJ\RXQHHGWRGR

    7KH,PSRUWDQFHRI6HFXULW\

    :KHQ,EHJDQZRUNLQJLQFRPSXWHUVHFXULW\WKHRQO\LQWHUHVWZDVIURPWKHPLOLWDU\DQGDIHZVFDWWHUHGSULYDF\DGYRFDWHV7KH,QWHUQHWKDVFKDQJHGDOOWKDW7KHSURPLVHRIWKH,QWHUQHWLVWREHDPLUURURIVRFLHW\(YHU\WKLQJZHGRLQWKHUHDOZRUOGZHZDQWWRGRRQWKH,QWHUQHWFRQGXFWSULYDWHFRQYHUVDWLRQVNHHSSHUVRQDOSDSHUVVLJQOHWWHUVDQGFRQWUDFWVVSHDNDQRQ\PRXVO\

    UHO\RQWKHLQWHJULW\RILQIRUPDWLRQJDPEOHYRWHSXEOLVKGLJLWDOGRFXPHQWV$OORIWKHVHWKLQJVUHTXLUHVHFXULW\&RPSXWHUVHFXULW\LVDIXQGDPHQWDOHQDEOLQJ

    0LOLWDU\+LVWRU\

    DQG1HWZRUN

    6HFXULW\0LOLWDU\VWUDWHJLVWVFDOOLWpWKHSRVLWLRQRIWKHLQWHULRUq7KHGHIHQGHUKDVWRGHIHQGDJDLQVWHYHU\SRVVLEOHDWWDFN7KHDWWDFNHURQWKHRWKHUKDQGRQO\KDVWRFKRRVHRQHDWWDFNDQGKHFDQFRQFHQWUDWHKLVIRUFHVRQWKDWRQHDWWDFN7KLVSXWV

    WKHDWWDFNHUDWDQDWXUDODGYDQWDJH

    'HVSLWHWKLVLQDOPRVWHYHU\DJHRIZDUIDUHWKHDWWDFNHULVDWDGLVDGYDQWDJH0RUHSHRSOHDUHQHHGHGWRDWWDFNDFLW\RUFDVWOHRUKRXVHRUIR[KROHWKDQWRGHIHQGLW7KHUDWLRVFKDQJHRYHU

    KLVWRU\tWKHGHIHQVHoVHQRUPRXVDGYDQWDJHLQ::,WUHQFKZDUIDUHOHVVHQHGZLWKWKHDGYHQWRIWKHWDQNIRUH[DPSOHtEXWWKHEDVLFWUXWKUHPDLQVDOORWKHUWKLQJVEHLQJHTXDOWKHPLOLWDU\GHIHQGHUKDVDFRQVLGHUDEOHDGYDQWDJHRYHUWKHDWWDFNHU

    7KLVKDVQHYHUEHHQWUXHRQWKH,QWHUQHW7KHUHWKHDWWDFNHUKDVDQDGYDQWDJH+HFDQFKRRVHZKHQDQGKRZWRDWWDFN+HNQRZVZKDWSDUWLFXODUSURGXFWVWKHGHIHQGHULVXVLQJRUHYHQLIKHGRHVQoWLWLVXVXDOO\RQHRIDVPDOOKDQGIXORISRVVLELOLWLHV7KHGHIHQGHULVIRUFHGWRFRQVWDQWO\XSJUDGHKLVV\VWHPWRHOLPL

  • 8/7/2019 Managed Securty Monitoring

    4/18

    0DQDJHG6HFXULW\0RQLWRULQJ 3DJH

    WHFKQRORJ\RIWKH,QWHUQHWLWVZKDWWUDQVIRUPVWKH,QWHUQHWIURPDQDFDGHPLFFXULRVLW\LQWRDVHULRXVEXVLQHVVWRRO7KHOLPLWVRIVHFXULW\DUHWKHOLPLWVRIWKH

    ,QWHUQHW$QGQREXVLQHVVRUSHUVRQLVZLWKRXWWKHVHVHFXULW\QHHGV

    7KHULVNVDUHUHDO(YHU\RQHWDONVDERXWWKHGLUHFWULVNVWKHIWRIWUDGHVHFUHWVFXVWRPHULQIRUPDWLRQPRQH\3HRSOHDOVRWDONDERXWWKHSURGXFWLYLW\ORVVHVGXHWRFRPSXWHUVHFXULW\SUREOHPV:KDWVWKHORVVWRDFRPSDQ\LILWVHPDLOJRHVGRZQIRUWZRGD\V"2ULIWHQSHRSOHKDYHWRVFUDPEOHWRFOHDQXSDIWHUDSDUWLFXODUO\QDVW\LQWUXVLRQ",YHVHHQILJXUHVDVKLJKDVELOOLRQ

    TXRWHGIRUZRUOGZLGHORVVHVGXHWRWKH,/29(

  • 8/7/2019 Managed Securty Monitoring

    5/18

  • 8/7/2019 Managed Securty Monitoring

    6/18

    0DQDJHG6HFXULW\0RQLWRULQJ 3DJH

    RJ\WKDWZLOODYRLGWKHWKUHDWVDQGHPEUDFHSURFHVVHVWKDWZLOOKHOSXVPDQDJHWKHULVNV

    6HFXULW\DQG5LVN0DQDJHPHQW

    $VNDQ\QHWZRUNDGPLQLVWUDWRUZKDWKHQHHGVVHFXULW\IRUDQGKHFDQGHVFULEHWKHWKUHDWV:HEVLWHGHIDFHPHQWVFRUUXSWLRQDQGORVVRIGDWDGXHWRQHWZRUNSHQHWUDWLRQVGHQLDORIVHUYLFHDWWDFNVYLUXVHVDQG7URMDQV7KHOLVWVHHPVHQGOHVVDQGDQHQGOHVVVHULHVRIQHZVVWRULHVSURYHVWKDWWKHWKUHDWVDUHUHDO

    $VNWKDWVDPHQHWZRUNDGPLQLVWUDWRUKRZVHFXULW\

    WHFKQRORJLHVKHOSDQGKHOOGLVFXVVDYRLGLQJWKHWKUHDWV7KLVLVWKHWUDGLWLRQDOSDUDGLJPRIFRPSXWHUVHFXULW\ERUQRXWRIDFRPSXWHUVFLHQFHPHQWDOLW\ILJXUHRXWZKDWWKHWKUHDWVDUHDQGEXLOGWHFKQRORJLHVWRDYRLGWKHP7KHFRQFHLWLVWKDWWHFKQRORJLHVFDQVRPHKRZVROYHFRPSXWHUVHFXULW\DQGWKHHQGUHVXOWLVDVHFXULW\SURJUDPWKDWEHFRPHVDQH[SHQVHDQGDEDUULHUWREXVLQHVV+RZPDQ\WLPHVKDVDVHFXULW\RIILFHUVDLG

  • 8/7/2019 Managed Securty Monitoring

    7/18

    3DJH %UXFH6FKQHLHU

    QRWDOORZHGWRKDQGOHDQ\WKLQJXQDWWHQGHGHWF$QGWKDWVDPHMHZHOU\VWRUHZLOOFDUU\WKHIWLQVXUDQFHDQRWKHUULVNPDQDJHPHQWWRRO

    0RUHVHFXULW\LVQWDOZD\VEHWWHU

  • 8/7/2019 Managed Securty Monitoring

    8/18

    0DQDJHG6HFXULW\0RQLWRULQJ 3DJH

    YHQWLRQPHFKDQLVPLVSHUIHFW7KLVLVHVSHFLDOO\WUXHIRUFRPSXWHUQHWZRUNV$OOVRIWZDUHSURGXFWVKDYHVHFXULW\EXJVPRVWQHWZRUNGHYLFHVDUHPLVFRQILJXUHG

    DQGXVHUVPDNHDOOVRUWVRIPLVWDNHV:LWKRXWGHWHFWLRQDQGUHVSRQVHWKHSUHYHQWLRQPHFKDQLVPVRQO\KDYHOLPLWHGYDOXH7KH\UHIUDJLOH$QGGHWHFWLRQDQGUHVSRQVHDUHQRWRQO\PRUHFRVWHIIHFWLYHEXWDOVRPRUHHIIHFWLYHWKDQSLOLQJRQPRUHSUHYHQWLRQ

    2QWKH,QWHUQHWWKLVWUDQVODWHVWRPRQLWRULQJ,Q2FWREHU0LFURVRIWGLVFRYHUHGWKDWDQDWWDFNHUKDGSHQHWUDWHGLWVFRUSRUDWHQHWZRUNZHHNVEHIRUHDQGPLJKWKDYHYLHZHGRUHYHQDOWHUHGWKHVRXUFHFRGHIRU

    VRPHRIWKHLUSURGXFWV$GPLQLVWUDWRUVGLVFRYHUHGWKLVEUHDFKZKHQWKH\QRWLFHGWZHQW\QHZDFFRXQWVEHLQJFUHDWHGRQDVHUYHU7KHQWKH\ZHQWEDFNWKURXJKWKHLUQHWZRUNVDXGLWORJVDQGSLHFHGWRJHWKHUKRZWKHDWWDFNHUJRWLQDQGZKDWKHGLG,IVRPHRQHKDGEHHQPRQLWRULQJWKRVHDXGLWORJVDXWRPDWLFDOO\JHQHUDWHGE\WKHILUHZDOOVVHUYHUVURXWHUVHWFLQUHDOWLPHWKHDWWDFNHUFRXOGKDYHEHHQGHWHFWHGDQGUHSHOOHGDWWKHSRLQWRIHQWU\

    7KDWVUHDOVHFXULW\,WGRHVQWPDWWHUKRZWKHDWWDFNHUJHWVLQRUZKDWKHLVGRLQJ,IWKHUHDUHHQRXJKPRWLRQVHQVRUVHOHFWULFH\HVDQGSUHVVXUHSODWHVLQ\RXUKRXVH\RXOOFDWFKWKHEXUJODUUHJDUGOHVVRIKRZKHJRWLQ,I\RXDUHPRQLWRULQJ\RXUQHWZRUNFDUHIXOO\HQRXJK\RXOOFDWFKDKDFNHUUHJDUGOHVVRIZKDWYXOQHUDELOLW\KHH[SORLWHGWRJDLQDFFHVV$QGLI\RXFDQUHVSRQGTXLFNO\DQGHIIHFWLYHO\\RXFDQUHSHOWKHDWWDFNHUEHIRUHKHGRHVDQ\GDPDJH*RRGGHWHFWLRQDQGUHVSRQVHFDQPDNHXSIRULPSHUIHFWSUHYHQWLRQ

    $QGSUHYHQWLRQV\VWHPVDUHQHYHUSHUIHFW1REDQNHYHUVD\V2XUVDIHLVVRJRRGZHGRQWQHHGDQDODUPV\VWHP1RPXVHXPHYHUVD\V2XUGRRUDQGZLQGRZORFNVDUHVRJRRGZHGRQWQHHGQLJKWZDWFKPHQ'HWHFWLRQDQGUHVSRQVHDUHKRZZHJHWVHFXULW\LQWKHUHDOZRUOGDQGWKH\UHWKHRQO\ZD\ZHFDQSRVVLEO\JHWVHFXULW\RQWKH,QWHUQHW&,2VPXVWLQYHVWLQQHWZRUNPRQLWRULQJVHUYLFHVLIWKH\DUHWRSURSHUO\PDQDJHWKHULVNVDVVRFLDWHGZLWKWKHLUQHWZRUNLQIUDVWUXFWXUH

    0RQLWRULQJDQG

    5HVLOLHQW6HFXULW\

    'XULQJWKHFRXUVHRIWKH\HDUVHYHUDOJURXSVRI(DVWHUQ(XURSHDQKDFNHUVEURNHLQWRDWOHDVWFRPSDQLHVo:HEVLWHVVWROHFUHGLWFDUGQXPEHUVDQGLQVRPHFDVHVWULHGWRH[WRUWPRQH\IURPWKHLUYLFWLPV7KHQHWZRUNYXOQHUDELOLWLHVH[SORLWHGE\WKHVH

    FULPLQDOVZHUHNQRZQDQGSDWFKHVWKDWFORVHGWKHPZHUHDYDLODEOHtEXWQRQHRIWKHFRPSDQLHVKDGLQVWDOOHGWKHP,Q-DQXDU\WKH5DPHQZRUPWDUJHWHGNQRZQYXOQHUDELOLWLHVLQVHYHUDOYHUVLRQVRI5HG+DW/LQX[1RQHRIWKHWKRXVDQGVRILQIHFWHGV\VWHPVKDG

    WKHLUSDWFKHVXSWRGDWH,Q2FWREHU0LFURVRIWZDVPROHVWHGE\XQNQRZQKDFNHUVZKRZDQGHUHGXQFKDOOHQJHGWKURXJKWKHLUQHWZRUNDFFHVVLQJLQWHOOHFWXDOSURSHUW\IRUZHHNVRUPRQWKV$FFRUGLQJWRUHSRUWVWKHDWWDFNHUVZRXOGQRWKDYHEHHQDEOH

    WREUHDNLQLI0LFURVRIWoVSDWFKHVKDGEHHQXSWRGDWH7KHVHULHVRIKLJKSURILOHFUHGLWFDUGWKHIWVLQ-DQXDU\LQFOXGLQJWKH&'8QLYHUVHLQFLGHQWZHUHDOVRWKHUHVXOWRIXQLQVWDOOHGSDWFKHV$SDWFKLVVXHGHLJKWHHQPRQWKVSUHYLRXVO\ZRXOGKDYHSURWHFWHGWKHVH

    FRPSDQLHV

  • 8/7/2019 Managed Securty Monitoring

    9/18

    3DJH %UXFH6FKQHLHU

    0RQLWRULQJ1HWZRUN6HFXULW\

    0RQLWRULQJWKHVHFXULW\RIDEXLOGLQJLPSOLHVVHYHUDOWKLQJV,WLPSOLHVDVHULHVRIVHQVRUVLQDQGDURXQGWKHEXLOGLQJ,WLPSOLHVDFHQWUDODODUPWKDWULQJVLIWKHVHQVRUVDUHWULSSHG$QGLWLPSOLHVVRPHNLQGRIUHVSRQVHWRWKHDODUP,IWKHUHVQRUHVSRQVHWKHDODUPLVXVHOHVV7KLQNRIDFDUDODUPJRLQJRIILQWKHLQQHUFLW\LIQRRQHQRWLFHVRUFDUHVLWKDVQRYDOXH

    1HWZRUNPRQLWRULQJLPSOLHVVHYHUDOVLPLODUWKLQJV,WLPSOLHVDVHULHVRIVHQVRUVLQDQGDURXQGWKHQHWZRUN/XFNLO\WKHVHDUHDOUHDG\LQSODFH(YHU\ILUHZDOOSURGXFHVDFRQWLQXRXVVWUHDPRIDXGLWPHVVDJHV6RGRHV

    HYHU\URXWHUDQGVHUYHU,'6VVHQGPHVVDJHVZKHQWKH\QRWLFHVRPHWKLQJ(YHU\RWKHUVHFXULW\SURGXFWJHQHUDWHVDODUPVLQVRPHZD\

    %XWWKHVHVHQVRUVE\WKHPVHOYHVGRQRWRIIHUVHFXULW\

  • 8/7/2019 Managed Securty Monitoring

    10/18

    0DQDJHG6HFXULW\0RQLWRULQJ 3DJH

    VWHSRIJRRGQHWZRUNPRQLWRULQJ(YHU\DWWDFNKDVDUHVSRQVH,WFRXOGEHDVVLPSOHDVVKXWWLQJRIIDSDUWLFXODU,3DGGUHVVWRUHSHODQDWWDFNHU,WFRXOGEHDV

    GUDVWLFDVWDNLQJDFRUSRUDWHQHWZRUNRIIWKH,QWHUQHW$JDLQSHRSOHDUHWKHNH\6RIWZDUHFDQRQO\SURYLGHJHQHULFLQIRUPDWLRQUHDOXQGHUVWDQGLQJUHTXLUHVH[SHUWV

    $QGILQDOO\WKHUHVSRQVHPXVWEHLQWHJUDWHGZLWKWKHEXVLQHVVQHHGVRIWKHRUJDQL]DWLRQ6HFXULW\HQJLQHHUVRQO\VHHKDOIWKHLQIRUPDWLRQ7KH\XQGHUVWDQGDWWDFNVDQGWKHLUVHFXULW\VLJQLILFDQFHEXWWKH\GRQWXQGHUVWDQGWKHEXVLQHVVUDPLILFDWLRQV$ODUJHHEXVLQHVV

    PLJKWNHHSLWV:HEVLWHXSDQGUXQQLQJHYHQLILWLVEHLQJDWWDFNHGSUHYHQWLQJWKHORVVRIUHYHQXHPD\EHPRUHLPSRUWDQWWKDQWKHVLWHVLPPHGLDWHVHFXULW\2QWKHRWKHUKDQGDODZILUPPD\KDYHWKHH[DFWRSSRVLWHUHVSRQVHWKHVDQFWLW\RILWVFXVWRPHUVGDWDPLJKWEHPRUHLPSRUWDQWWKDQKDYLQJLWV:HEVLWHDYDLODEOH

    7KLVLVGHWHFWLRQDQGUHVSRQVHDVDSSOLHGWRFRPSXWHUQHWZRUNV1HWZRUNGHYLFHVSURGXFHPHJDE\WHVRIDXGLWLQIRUPDWLRQGDLO\$XWRPDWLFVHDUFKWRROVVLIWWKURXJK

    WKRVHPHJDE\WHVORRNLQJIRUWHOOWDOHVLJQVRIDWWDFNV([SHUWDQDO\VWVH[DPLQHWKRVHWHOOWDOHVXQGHUVWDQGLQJZKDWWKH\PHDQDQGGHWHUPLQLQJKRZWRUHVSRQG$QGWKHRZQHURIWKHQHWZRUNWKHRUJDQL]DWLRQPDNHVVHFXULW\GHFLVLRQVEDVHGRQRQJRLQJEXVLQHVVFRQFHUQV

    7RPDNHQHWZRUNPRQLWRULQJZRUNSHRSOHDUHQHHGHGHYHU\VWHSRIWKHZD\6RIWZDUHLVMXVWWRRHDV\WRIRRO6RIWZDUHGRHVQWWKLQNGRHVQWTXHVWLRQGRHVQWDGDSW:LWKRXWSHRSOHFRPSXWHUVHFXULW\VRIWZDUHLVMXVWD

    VWDWLFGHIHQVH0DUU\VRIWZDUHZLWKH[SHUWVDQG\RXKDYHDZKROHGLIIHUHQWOHYHORIVHFXULW\

    2XWVRXUFLQJ0RQLWRULQJ

    7KHNH\WRDVXFFHVVIXOGHWHFWLRQDQGUHVSRQVHV\VWHPLVYLJLODQFHDWWDFNVFDQKDSSHQDWDQ\WLPHRIWKHGD\DQGDQ\GD\RIWKH\HDU:KLOHLWLVSRVVLEOHIRUFRPSDQLHVWREXLOGGHWHFWLRQDQGUHVSRQVHVHUYLFHVIRUWKHLURZQQHWZRUNVLWVUDUHO\FRVWHIIHFWLYH6WDIILQJIRUVH

    FXULW\H[SHUWLVHKRXUVDGD\DQGGD\VD\HDUUHTXLUHVILYHIXOOWLPHHPSOR\HHVPRUHLI\RXLQFOXGHVXSHUYLVRUVDQGEDFNXSSHUVRQQHOZLWKPRUHVSHFLDO

    7KRVHZKRPDQDJHFRPSXWHUQHWZRUNVDUHSHRSOHWRRDQGSHRSOHGRQoW

    DOZD\VGRWKHVPDUWHVWWKLQJ7KH\NQRZWKH\oUHVXSSRVHGWRLQVWDOODOOSDWFKHV%XWVRPHWLPHVWKH\FDQoWWDNHFULWLFDOV\VWHPVRIIOLQH6RPHWLPHVWKH\GRQoWKDYHWKHVWDIILQJDYDLODEOHWRSDWFKHYHU\V\VWHPRQWKHLUQHWZRUN6RPHWLPHVDSSO\LQJDSDWFKEUHDNV

    VRPHWKLQJHOVHRQWKHLUQHWZRUN,WKLQNLWoVWLPHWKHLQGXVWU\UHDOL]HGWKDWH[SHFWLQJWKHSDWFKSURFHVVWRLPSURYHQHWZRUNVHFXULW\MXVWGRHVQoWZRUN

    6HFXULW\EDVHGRQSDWFKHVLVLQKHUHQWO\IUDJLOH$Q\ODUJHQHWZRUNLVJRLQJWRKDYHKXQGUHGV

    RIYXOQHUDELOLWLHV,IWKHUHoVDYXOQHUDELOLW\LQ\RXUV\VWHP\RXFDQEHDWWDFNHGVXFFHVVIXOO\DQGWKHUHoVQRWKLQJ\RXFDQGRDERXWLW(YHQLI\RXPDQDJHWRLQVWDOOHYHU\SDWFK\RXNQRZDERXWZKDWDERXWWKHYXOQHUDELOLWLHVWKDWKDYHQoWEHHQSDWFKHG\HW"7KDWVDPH

    DOHUWVHUYLFHOLVWHGQHZYXOQHUDELOLWLHVIRUZKLFKWKHUHDUHQRSDWFKHV2UWKHYXOQHUDELOLWLHVGLVFRYHUHGEXWQRWUHSRUWHG\HW"2UWKHRQHVVWLOOXQGLVFRYHUHG"

    *RRGVHFXULW\LVUHVLOLHQW,WoVUHVLOLHQWWRXVHUHUURUV,WoVUHVLOLHQWWRQHW

    ZRUNFKDQJHV$QGLWoVUHVLOLHQWWRDGPLQLVWUD

  • 8/7/2019 Managed Securty Monitoring

    11/18

    3DJH %UXFH6FKQHLHU

    L]HGVNLOOV(YHQLIDQRUJDQL]DWLRQFRXOGILQGWKHEXGJHWIRUDOORIWKHVHSHRSOHLWZRXOGEHYHU\GLIILFXOWWRKLUHWKHPLQWRGD\VMREPDUNHW

    5HWDLQLQJWKHPZRXOGEHHYHQKDUGHU6HFXULW\PRQLWRULQJLVLQKHUHQWO\EXUVW\VL[ZHHNVRIERUHGRPIROORZHGE\HLJKWKRXUVRISDQLFWKHQVHYHQZHHNVRIERUHGRPIROORZHGE\VL[KRXUVRISDQLF$WWDFNVDJDLQVWDVLQJOHRUJDQL]DWLRQGRQWKDSSHQRIWHQHQRXJKWRNHHSDWHDPRIWKLVFDOLEHUHQJDJHGDQGLQWHUHVWHG

    ,QWKHUHDOZRUOGWKLVNLQGRIH[SHUWLVHLVDOZD\VRXWVRXUFHG,WVWKHRQO\FRVWHIIHFWLYHZD\WRVDWLVI\WKH

    UHTXLUHPHQWV,PD\RQO\QHHGDGRFWRUWZLFHLQWKHFRPLQJ\HDUEXWZKHQ,QHHGRQH,PD\QHHGKLPLPPHGLDWHO\,PD\QHHGVSHFLDOLVWV2XWRIDKXQGUHGSRVVLEOHVSHFLDOWLHV,PD\QHHGWZRRIWKHPDQG,KDYHQRLGHDEHIRUHKDQGZKLFKRQHV,ZRXOGQHYHUFRQVLGHUKLULQJDWHDPRIGRFWRUVWRZDLWDURXQGXQWLO,KDSSHQWRJHWVLFN,RXWVRXUFHP\PHGLFDOQHHGVWRP\FOLQLFP\HPHUJHQF\URRPP\KRVSLWDO6LPLODUO\DQHWZRUNQHHGVWRRXWVRXUFHLWVVHFXULW\PRQLWRULQJWRDQ060VHUYLFH

    $VLGHIURPWKHDJJUHJDWLRQRIH[SHUWLVHDQ060VHUYLFHKDVRWKHUHFRQRPLHVRIVFDOH,WFDQPRUHHDVLO\KLUHDQGWUDLQLWVSHUVRQQHOVLPSO\EHFDXVHLWQHHGVPRUHRIWKHP$QGLWFDQEXLOGDQLQIUDVWUXFWXUHWRVXSSRUWWKHP9LJLODQWPRQLWRULQJPHDQVNHHSLQJXSWRGDWHRQQHZYXOQHUDELOLWLHVQHZKDFNHUWRROVQHZVHFXULW\SURGXFWVDQGQHZVRIWZDUHUHOHDVHV$Q060VHUYLFHFDQVSUHDGWKHVHFRVWVDPRQJDOORILWVFXVWRPHUV

    $Q060SURYLGHUDOVRKDVDPXFKEURDGHUYLHZRIWKH,QWHUQHW,WFDQOHDUQIURPDWWDFNVDJDLQVWRQHFXVWRPHUDQGXVHWKDWNQRZOHGJHWRSURWHFWDOORILWVFXVWRPHUV$QGIURPLWVSRLQWRIYLHZDWWDFNVDUHIUHTXHQW7KHUHVDUHDVRQ\RXGRQWKDYH\RXURZQILUHGHSDUWPHQWHYHQLI\RXFDQDIIRUGRQH:KHQWKHILUHGHSDUWPHQWFRPHVWR\RXUKRXVH\RXZDQWLWWRKDYHSUDFWLFHGRQWKHUHVWRIWKHQHLJKERUKRRG7RDQ060FRPSDQ\QHWZRUNDWWDFNVDUHHYHU\GD\RFFXUUHQFHVLWVH[SHUWVNQRZH[DFWO\KRZWRUHVSRQGWRDQ\JLYHQDW

    WDFNEHFDXVHLQDOOOLNHOLKRRGWKH\KDYHDOUHDG\VHHQWKHVDPHDWWDFNPDQ\WLPHVEHIRUH

    WRUVQRWLQVWDOOLQJHYHU\SDWFK0DQDJHG6HFXULW\0RQLWRULQJLVDQLPSRU

    WDQWSDUWRIWKDWUHVLOLHQFH0RQLWRULQJPDNHVDQHWZRUNOHVVGHSHQGHQWRQNHHSLQJSDWFKHVXSWRGDWHLWoVDSURFHVVWKDWSURYLGHVVHFXULW\HYHQLQWKHIDFHRIHYHUSUHVHQWYXOQHUDELOLWLHVXQLQVWDOOHGSDWFKHVDQGLPSHUIHFWSURGXFWV

    ,QDSHUIHFWZRUOGV\VWHPVZRXOGUDUHO\QHHGVHFXULW\SDWFKHV7KHIHZSDWFKHVWKH\GLGQHHGZRXOGDXWRPDWLFDOO\GRZQORDGEHHDV\WRLQVWDOODQGDOZD\VZRUN%XWZHGRQoWOLYHLQDSHUIHFWZRUOG1HWZRUNDGPLQLVWUDWRUVDUHEXV\SHRSOHDQGQHWZRUNVDUHFRQVWDQWO\FKDQJLQJ

    9LJLODQWPRQLWRULQJLVE\QRPHDQVDSDQDFHDEXWLWLVDPXFKPRUHUHDOLVWLFZD\RISURYLGLQJUHVLOLHQWVHFXULW\

  • 8/7/2019 Managed Securty Monitoring

    12/18

  • 8/7/2019 Managed Securty Monitoring

    13/18

    3DJH %UXFH6FKQHLHU

    ZRUNFKDQJHVHYHU\GD\QHZDSSOLFDWLRQVQHZVHUYHUVQHZYXOQHUDELOLWLHV$&,2FDQJRWRVOHHSRQHQLJKWFRQILGHQWWKDWKLVQHWZRUNLVVHFXUHDQGZDNHXSWKH

    IROORZLQJPRUQLQJWRUHDGDERXWDPDMRUYXOQHUDELOLW\LQWKHQHZVSDSHU6XGGHQO\KLVQHWZRUNLVZLGHRSHQHYHQWKRXJKQRWKLQJFKDQJHG$&,2FDQUHFRQILJXUHKLVQHWZRUNWRLQFUHDVHSURGXFWLYLW\RUDGGDQHZQHWZRUNVHUYLFHRUVLPSO\XSJUDGHDVRIWZDUHSDFNDJHDQGVXGGHQO\WKHVHFXULW\RIKLVHQYLURQPHQWLVFRPSOHWHO\GLIIHUHQW1HWZRUNVDUHH[WUHPHO\FRPSOH[QRQOLQHDUDQGWLJKWO\FRXSOHGDQGLWVLPSRVVLEOHWRSUHGLFWKRZGLIIHUHQWVXEV\VWHPVLQWHUDFW+RZGRHVKHNQRZWKHVHFXULW\UDPLILFDWLRQVRIZKDWKHGRHV"7KH

    RQO\ZD\LVWRPRQLWRUVHFXULW\

    ,WVVSHFLRXVORJLFIRUD&,2WRGHFLGHWRZDLWXQWLOKLVQHWZRUNLVVWDEOHKHXQGHUVWDQGVKLVVHFXULW\DQGDOOKLVSDWFKHVDUHXSWRGDWH,WOOQHYHUKDSSHQ0RQLWRULQJVEHVWYDOXHLVZKHQDQHWZRUNLVLQIOX[DVDOOODUJHQHWZRUNVDOZD\VDUHGXHWRLQWHUQDODQGH[WHUQDOIDFWRUV0RQLWRULQJSURYLGHVLPPHGLDWHVHFXULW\LQDZD\WKDWMXVWGRLQJDYXOQHUDELOLW\DVVHVVPHQWRUGURSSLQJDILUHZDOOLQWRDQHWZRUNFDQQHYHUSURYLGH0RQL

    WRULQJSURYLGHVG\QDPLFVHFXULW\LQDZD\WKDW\HWDQRWKHUVHFXULW\SURGXFWFDQQHYHUSURYLGH$QGDVVHFXULW\SURGXFWVDUHDGGHGLQWRDQHWZRUNILUHZDOOV,'6VVSHFLDOL]HGVHFXULW\GHYLFHVPRQLWRULQJRQO\JHWVEHWWHU

    ,QHQJLQHHULQJFRQWUROWKHRU\LVEDVHGRQWKHFRQFHSWRIPRQLWRULQJ$QHQJLQHHUPLJKWZDQWWREHDEOHWRWXQHKLVIDFWRU\+RZFDQ,FRQWUROWKLVSODVWLFILOPH[WUXGHUWRHQVXUHDXQLIRUPWKLFNQHVVRISODVWLF"7KLV

    LVDUHDOTXHVWLRQDQGDFRPSOLFDWHGRQH7KHSODVWLFVH[WUXGHUPLJKWKDYHDGR]HQGLIIHUHQWGLDOVFRQWUROOLQJWKLQJVOLNHWHPSHUDWXUHSUHVVXUHDQGVSHHG

  • 8/7/2019 Managed Securty Monitoring

    14/18

  • 8/7/2019 Managed Securty Monitoring

    15/18

    3DJH %UXFH6FKQHLHU

    DVVLVWDQFHLQVWRSSLQJWKHDWWDFNDQGFORVLQJWKHYXOQHUDELOLW\7RXVWKHQHWZRUNDUFKLWHFWXUHDQGVHFXULW\SURGXFWVDUHMXVWWKHWHUUDLQZHILJKWRQ

    &RXQWHUSDQHVYDOXHUHVLGHVSULPDULO\LQRXUDQDO\VWV7KH\DUHH[SHUWVLQQHWZRUNVHFXULW\H[SHULHQFHGIURPGHIHQGLQJDJDLQVWFRXQWOHVVDWWDFNVRQFXVWRPHUQHWZRUNVDQGUHLQIRUFHGE\DIDVWHVFDODWLRQSURFHGXUHWKDWFDQFDOOLQWKHZRUOGVEHVWH[SHUWVZKHQUHTXLUHG7KH\DUHYLJLODQWFRQVWDQWO\ZDWFKLQJFXVWRPHUQHWZRUNVIRUVLJQVRIDWWDFN7KH\DUHDGDSWLYHDEOHWRVHHQHZDWWDFNVWKDWDXWRPDWLFSURGXFWVPLVVDQGUHVSRQGWRWKHP$QGWKH\DUHUHOHQWOHVVLQWKHLUSXUVXLWRIVH

    FXULW\

    &RXQWHUSDQHVDQDO\VWVDUHDLGHGE\VHYHUDOSURFHVVHV)LUVWWKHUHLVWKHSURFHVVWKDWFROOHFWVLQIRUPDWLRQIURPWKHFOLHQWVQHWZRUNVDQGSUHVHQWVLWLQDIRUPWKDWWKHDQDO\VWVFDQHIILFLHQWO\XQGHUVWDQGDQGDQDO\]HWKLVLVRXU6HQWU\6HFRQGWKHUHLVWKHSURFHVVE\ZKLFKWKHQHWZRUNLQIRUPDWLRQLVPDWFKHGZLWKDGLDJQRVLVRUVHULHVRIGLDJQRVHVWKLVLVWKH6RFUDWHVV\VWHP7KLUGWKHUHLVWKHSURFHVVZLWKLQ6RFUDWHVE\ZKLFKWKH

    QHWZRUNLQIRUPDWLRQDQGGLDJQRVLVDUHPDWFKHGZLWKFOLHQWVSHFLILFLQIRUPDWLRQDERXWWKHVHULRXVQHVVRIGLIIHUHQWVRUWVRIQHWZRUNHYHQWV$QGIRXUWKWKHUHLVWKHSURFHVVE\ZKLFKERWKWKH6HQWU\DQG6RFUDWHVDUHXSGDWHGZLWKQHZLQIRUPDWLRQDERXWDWWDFNVYXOQHUDELOLWLHVSURGXFWVHWF7KLVLVRXU1HWZRUN,QWHOOLJHQFHIXQFWLRQ:HFRQVWDQWO\VFRXUVHFXULW\GDWDEDVHVDQGUHVHDUFKLQVWLWXWLRQVDQGHYHQWKHKDFNHUXQGHUJURXQGORRNLQJIRUQHZDWWDFNVQHZYXOQHUDELOLWLHVDQGQHZKDFNHUWRROVPRGLI\LQJ6RFUDWHVWRWDNHWKLV

    LQIRUPDWLRQLQWRDFFRXQW

    ,WVQRWMXVWVPDUWSHRSOHDQGVPDUWSURFHVVHVWKDWPDNH&RXQWHUSDQHV060ZRUNLWVWKHZD\ZHGHYHORSRXUDQDO\VWV:HKDYHH[DFWLQJKLULQJUHTXLUHPHQWV:HUXQEDFNJURXQGFKHFNVDQGSHUIRUPULJRURXVSHUVRQDOVFUHHQLQJ2XUWUDLQLQJSURJUDPUHVHPEOHVERRWFDPSLWVDUGXRXVLWVGHPDQGLQJDQGQRWHYHU\RQHPDNHVLW([SHULHQFHGDQDO\VWVPHQWRUQHZDQDO\VWV,QWKHHQGWKHUHLVDQHVSULWGHFRUSVWKDW

    ZLOOGRHYHU\WKLQJSRVVLEOHWRGHIHQGWKHFXVWRPHU$QGLQWKHHQG&RXQWHUSDQHLVKLUHGEHFDXVHFRPSDQLHVZDQWWKDWHVSULWGHFRUSVGHIHQGLQJWKHP

    ,QWUXVLRQ

    'HWHFWLRQ6\VWHPV

    DQG0RQLWRULQJ5HFHQWO\,oYHEHHQVHHLQJVHYHUDODUWLFOHVIRUHWHOOLQJWKHGHDWKRI,QWUXVLRQ'HWHFWLRQ6\VWHPV,'66XSSRVHGO\FKDQJHVLQWKHZD\QHWZRUNVZRUNZLOOPDNHWKHPDQREVROHWHUHOLFRIVLPSOHUWLPHV:KLOH,DJUHHWKDWWKHFKDOOHQJHV,'6VIDFHDUH

    VHULRXVDQGWKDWWKH\ZLOODOZD\VKDYHOLPLWDWLRQV,DPPRUHRSWLPLVWLFDERXWWKHLUIXWXUH

    ,'6VDUHWKHQHWZRUNHTXLYDOHQWRIYLUXVVFDQQHUV,'6VORRNDWQHWZRUNWUDIILFRUSURFHVVHVUXQQLQJRQKRVWVIRUVLJQVRIDWWDFN

    ,IWKH\VHHRQHWKH\VRXQGDQDODUP,Q6HFUHWVDQG/LHV,VSHQWVHYHUDOSDJHVRQ,'6VSSsKRZWKH\ZRUNKRZWKH\IDLOWKHSUREOHPVRIIDOVHDODUPV6XIILFHLWWRVD\WKDWWKHWZRSUREOHPV,'6VKDYHDUHIDLOLQJWRGHWHFWUHDODWWDFNVDQGIDLOLQJ

    WRLJQRUHIDOVHDODUPV6PDUWDGPLQLVWUDWRUVUHJXODUO\LJQRUHpFKDWW\q,'6V\VWHPVEHFDXVHWKH\DUHJHWWLQJVRPDQ\IDOVHSRVLWLYHPHVVDJHV$QGKDFNHUWRROVVSHFLILFDOO\GHVLJQHGWRE\SDVV,'6VDUHFRPPRQ

    7KHVHWZRSUREOHPVDUHQRWKLQJQHZEXWVHYHUDOUHFHQWGHYHORSPHQWV

  • 8/7/2019 Managed Securty Monitoring

    16/18

    0DQDJHG6HFXULW\0RQLWRULQJ 3DJH

    &RXQWHUSDQHVDQDO\VWVZRUNLQRXU62&V:HFXUUHQWO\KDYHWZR62&VDSULPDU\IDFLOLW\LQ&KDQWLOO\9$DQGDVHFRQGDU\IDFLOLW\LQ0RXQWDLQ9LHZ&$

    +DYLQJPXOWLSOH62&VLVNH\WRJXDUDQWHHLQJXQLQWHUUXSWHGVHUYLFH7KHVHDUHERWKSK\VLFDOO\KDUGHQHGIDFLOLWLHVHQWUDQFHUHTXLUHVDSDVVZRUGDELRPHWULFDQGDSK\VLFDODFFHVVWRNHQ7KH62&VDUHXQGHUFRQVWDQWVXUYHLOODQFHDXGLRYLGHRDQGFOLFNVWUHDPWRSURYLGHDQXQDPELJXRXVDXGLWWUDLO,QIDFWWKHWZR62&VPRQLWRUHDFKRWKHUDQGFDQIRUFHDVZLWFKRYHULIWKHUHLVDSUREOHP7KHLQWHUQDOQHWZRUNLVSK\VLFDOO\LVRODWHGIURPWKHJHQHUDO,QWHUQHWEXWGLVWULEXWHGDPRQJWKH62&V1RQHRIWKHZRUNVWDWLRQVFDQFUHDWHRUUHDG

    UHPRYDEOHPHGLD7KLVOHYHORIVHFXULW\PD\VHHPH[FHVVLYHEXWWRXVLWLVYLWDOWRHQVXUHWKHVHFXULW\RIRXUFXVWRPHUVQHWZRUNV

    7KHH\HVDQGHDUVRI&RXQWHUSDQHV060VHUYLFHDUHWKHVHQVRUVRQDQHWZRUN6RPHVHQVRUVDUHDOUHDG\LQSODFHDQGFDQLPPHGLDWHO\SURYLGHLQIRUPDWLRQWR&RXQWHUSDQH7KHVHDUHURXWHUVVHUYHUVILUHZDOOVDQGRWKHUQHWZRUNGHYLFHV2WKHUVHQVRUVDUHVHFXULW\VSHFLILFDQGPXVWEHVSHFLDOO\LQVWDOOHGRQDQHWZRUN

    ,'6VKRQH\SRWVDQGRWKHU,QWHUQHWEXUJODUDODUPVFRQWHQWSURWHFWLRQV\VWHPVDQGDSSOLFDWLRQVHFXULW\GHYLFHV

    &RXQWHUSDQHVXQLTXHVHFXULW\YDOXHFRPHVIURPFRUUHODWLQJLQIRUPDWLRQIURPGLIIHUHQWVHQVRUV2IWHQDWWDFNVDUHQRWREYLRXVIURPDVLQJOHORJHQWU\EXWRQO\IURPDSDWWHUQRIDFWLYLW\%HFDXVH&RXQWHUSDQHPRQLWRUVDOOVHQVRUVRQDFRPSDQ\VQHWZRUNLWFDQVHHWKLQJVWKDWQRVLQJOHVHQVRUFDQ7KLVLVDFULWLFDOGLI

    IHUHQFHEHWZHHQ&RXQWHUSDQHDQGRWKHUPRQLWRULQJFRPSDQLHVZHGRQWMXVWZDWFKDILUHZDOODQGDQ,'6ZHGRQWMXVWZDWFKDOLPLWHGPHQXRIVHFXULW\SURGXFWVZHZDWFKHYHU\WKLQJRQDFXVWRPHUVQHWZRUN7KLVJLYHV&RXQWHUSDQHVHFXULW\DUHVLOLHQFHXQPDWFKHGLQWKHLQGXVWU\

    $FRPSDQ\FRXOGLQWKHRU\DWWHPSWWRUHSOLFDWH&RXQWHUSDQHVPRQLWRULQJLQWKHLURZQQHWZRUN7KLVZRXOGUHTXLUHDWOHDVWILYHSHRSOHWRVWDIIDVLQJOHPRQLWRULQJ

    VWDWLRQ[,WZRXOGUHTXLUHDGGLWLRQDOH[SHUWVIRUVSHFLILFSURGXFWVDQGSUREOHPVDWHDPWRPRQLWRUWKHVHFXULW\QHZVJURXSVDQGKDFNHUXQGHUJURXQGPRUH

    WKUHDWHQWRXQGHUPLQH,'6VFRPSOHWHO\

    )LUVWLVWKHULVHRI,3VHF,3VHFLVDVHFXULW\SURWRFROWKDWHQFU\SWV,3WUDIILF$Q,'6FDQoWGHWHFWZKDWLWFDQoWXQGHUVWDQGDQGLVXVHOHVVDJDLQVWHQFU\SWHGQHWZRUNWUDIILF$VHQFU\SWLRQEHFRPHVPRUHZLGHVSUHDGRQDQHWZRUNDQ,'6EHFRPHVOHVVXVHIXO

    6HFRQGLVWKHHPHUJHQFHRI8QLFRGH,QWKH-XO\&U\SWR*UDP,WDONHGDERXWVHFXULW\SUREOHPVDVVRFLDWHGZLWK8QLFRGH2QHSUREOHPLVWKHDELOLW\WRGLVJXLVHFKDUDFWHUVWULQJVLQYDULRXVZD\V6LQFHPRVW,'6VORRNIRUFKDUDFWHUVWULQJVLQSDFNHWVLQGL

    FDWLQJFHUWDLQQHWZRUNDWWDFNV8QLFRGHWKUHDWHQVWRPDNHWKLVMREXQIHDVLEOH

    7KLUGLVWKHLQFUHDVHGGLVWULEXWLRQRIQHWZRUNV7RGD\oVWUDIILFLVQoWMXVWFRPLQJWKURXJKRQHILUHZDOOEXWDOVRWKURXJKKXQGUHGVRIGLIIHUHQWGLUHFWH[WHUQDOOLQNVWRFXVWRPHUVVXSSOLHUVMRLQWYHQWXUHSDUWQHUVRXWVRXUFLQJFRPSDQLHV,3VHFJDWHZD\VIRUWHOHFRPPXWHUVDQGURDGZDUULRUVHWF7KLVPDNHVLWYHU\KDUGWRPRQLWRUWKHWUDIILF

    $QGIRXUWKLVWKHVKHHUVSHHGRIQHWZRUNV)RUDQ

    ,'6WREHHIIHFWLYHLWKDVWRH[DPLQHHYHU\SDFNHW

  • 8/7/2019 Managed Securty Monitoring

    17/18

    3DJH %UXFH6FKQHLHU

    SHRSOHWRFRQVWDQWO\WUDLQDQGGULOOWKHWHDPDQGDVHFXUHIDFLOLW\WRKRXVHDOORIWKLV$QGHYHQWKHQWKHLQKRXVHJURXSZRXOGQRWEHDVTXDOLILHGDV&RXQWHUSDQH

    7KH\ZRXOGQRWKDYHWKHH[SHULHQFHRIPRQLWRULQJKXQGUHGVRIGLIIHUHQWFXVWRPHUVQHWZRUNV7KH\ZRXOGQRWKDYH&RXQWHUSDQHVWUDLQLQJ7KH\ZRXOGQRWKDYHDFFHVVWR&RXQWHUSDQHV1HWZRUN,QWHOOLJHQFHRULWV6RFUDWHVV\VWHP7KH\ZRXOGQRWKDYHDFFHVVWR&RXQWHUSDQHVH[SHUWV:KHQDFRPSDQ\LVDWWDFNHGLWQHHGVWKHEHVWSRVVLEOHSHRSOHZRUNLQJWRGHIHQGLW&RXQWHUSDQHV060VHUYLFHFDQSURWHFWDQHWZRUNEHWWHUWKDQGRLQJLW\RXUVHOIDQGDWDIUDFWLRQRIWKHFRVW

    &RQFOXVLRQ

    1HWZRUNVHFXULW\ULVNVZLOODOZD\VEHZLWKXV7KHGRZQVLGHRIEHLQJLQDKLJKO\FRQQHFWHGQHWZRUNLVWKDWZHDUHDOOFRQQHFWHGZLWKWKHEHVWDQGZRUVWRIVRFLHW\6HFXULW\SURGXFWVZLOOQRWVROYHWKHSUREOHPVRI,QWHUQHWVHFXULW\DQ\PRUHWKDQWKH\VROYHWKHVHFXULW\SUREOHPVLQWKHUHDOZRUOG7KHEHVWZHFDQGRLVWRPDQDJHWKHULVNVHPSOR\WHFKQRORJLFDODQGSURFHGXUDOPLWLJDWLRQZKLOHDWWKHVDPHWLPHDOORZLQJEXVLQHVVHVWRWKULYH

    &RPSXWHUVHFXULW\HTXDOVYLJLODQFHDGD\WRGD\SURFHVV,WVEHHQWKRXVDQGVRI\HDUVDQGWKHZRUOGVWLOOLVQWDVDIHSODFH$QGQRPDWWHUKRZIDVWWHFKQRORJ\DGYDQFHVDODUPVDQGVHFXULW\VHUYLFHVDUHVWLOOVWDWHRIWKHDUW

    7KHNH\WRHIIHFWLYHVHFXULW\LVKXPDQLQWHUYHQWLRQ$XWRPDWLFVHFXULW\LVQHFHVVDULO\IODZHG6PDUWDWWDFN

    HUVE\SDVVWKHVHFXULW\DQGQHZDWWDFNVIRROSURGXFWV3HRSOHDUHQHHGHGWRUHFRJQL]HDQGUHVSRQGWRQHZDWWDFNVDQGQHZWKUHDWV,WVDVLPSOHPDWWHURIUHJDLQLQJDEDODQFHRISRZHUKXPDQPLQGVDUHWKHDWWDFNHUVVRKXPDQPLQGVQHHGWREHWKHGHIHQGHUVDVZHOO

    2QWKHGD\\RXUHDWWDFNHG\RXZDQWWKHEHVWSRVVLEOHGHIHQVH,WVQRWHQRXJKWRJLYHWKHMREWR\RXURYHUZRUNHGV\VWHPDGPLQLVWUDWRUVRULQKRXVHVHFXULW\VWDII

  • 8/7/2019 Managed Securty Monitoring

    18/18

    0DQDJHG6HFXULW\0RQLWRULQJ 3DJH

    060FRPELQHVSHRSOHSURFHVVHVDQGSURGXFWVWRFUHDWHDVHFXULW\HQYLURQPHQWIRUWKHFKDRVRIPRGHUQEXVLQHVVQHWZRUNV7KHUHDOLW\RIWRGD\V,QWHUQHW

    PDNHV060WKHPRVWFRVWHIIHFWLYHZD\WRSURYLGHUHVLOLHQWVHFXULW\DQG&RXQWHUSDQH,QWHUQHW6HFXULW\,QFLVWKH060LQGXVWU\OHDGHU

    2XUSHRSOHDUHQHWZRUNVHFXULW\H[SHUWVRXUVHFXULW\DQDO\VWVDUHXQLTXHO\TXDOLILHGE\WKHLUWRROVWUDLQLQJDQGH[SHULHQFHWRZDWFKDOORI\RXUQHWZRUNQRWMXVWDIHZVHFXULW\GHYLFHV$QGWKH\UHEDFNHGXSE\WKHEHVWVHFXULW\H[SHUWVLQWKHZRUOG7KH\UHYLJLODQWZDWFKLQJ\RXUFRPSOHWHQHWZRUN[7KH\UHUHOHQWOHVVLQSUR

    WHFWLQJ\RXUDVVHWV$QGWKH\UHDGDSWLYHDOZD\VRQHVWHSDKHDGRIWKHQHZHVWKDFNHUJURXSSURGXFWYXOQHUDELOLW\RUDWWDFNWRRO

    &RXQWHUSDQHV060LPSURYHVDQHWZRUNVVHFXULW\LPPHGLDWHO\WRGD\,WWHOOV\RXZKHWKHU\RXUVHFXULW\LVZRUNLQJDQGVDYHV\RXZKHQLWLVQW%HWWHUWKDQDYXOQHUDELOLW\DVVHVVPHQWEHWWHUWKDQDQDXGLWEHWWHUWKDQLQVWDOOLQJPRUHVHFXULW\SURGXFWV&RXQWHUSDQHV060JLYHV\RXWKHVHFXULW\\RXQHHGWRNHHS\RXU

    EXVLQHVVPRYLQJDKHDG,WVWKHILUVWWKLQJ\RXQHHGWRGR

    $Q\RQHFDQLQVWDOODVHFXULW\SURGXFWFDUU\DSDJHUDQGSUHWHQGWRPRQLWRUDQHWZRUN&RXQWHUSDQHPDUULHVWKHEHVWSHRSOHDQGWKHEHVWSURFHVVHVWRSURYLGHFRPSOHWHVHFXULW\UHVLOLHQWVHFXULW\DOHYHORIVHFXULW\XQPDWFKHGDQ\ZKHUH

    RQHKDVWRZDWFKWKHVHVHQVRUV[6RPHRQHKDVWRFRUUHODWHLQIRU

    PDWLRQIURPDYDULHW\RIVHQVRUVDQGILJXUHRXWZKDWoVDIDOVHDODUPDQGZKDWoVUHDO6RPHRQHKDVWRNQRZKRZWRUHVSRQGDQGWRFRDFKWKHQHWZRUNDGPLQLVWUDWRUWKURXJKWKHSURFHVV,WKLQN060ZLOOILQDOO\PDNH,'6VORRNJRRG