Cybersecurity with Apache Metron and Apache Solr - Ward Bekker, Hortonworks & Scott Cote, Lucidworks

•

1 like•311 views

This document summarizes a presentation about Apache Metron and Apache Solr for cybersecurity. The presentation introduces Apache Metron as an open source architecture for real-time cybersecurity analytics. It processes streaming data from various sources through security analytics modules and stores the results in Apache Solr for real-time search and visualization. Examples of companies using Apache Metron include managed security service providers, telecom providers, financial institutions, and government organizations. The presentation concludes with a demo of how Apache Metron can detect malware by comparing blob signatures ingested from log files.

Cybersecurity with Apache
Metron and Apache Solr
Ward Bekker - Solutions Engineer, Hortonworks
Scott Cote - Senior Software Engineer, Lucidworks
1

Agenda for today’s talk
• Introduction
• Why Apache Metron?
• What is Apache Metron?
• What does Apache Metron look like?
• Who’s using Apache Metron?
• Apache Metron Ecosystem
• Demo!
2

Ward Bekker
• Hortonworks Solutions Engineer NEMEA
• SME Cybersecurity
• Apache Metron Contributor
• Twitter: @wardbekker
Ward Bekker

Ward Bekker
•Lucidworks Senior Software Engineer - Fusion Server
•Core Engineering
•Founder of DFW Data Science User Group
•Twitter: @scottccote & @DFWDataScience
Scott Cote

• I commit code/docs/patches
• Running in production
• Testing in lab
• Just read/researched not touched

Months until
breach
noticed
Avg.
months log
retention
9 6
VS
3
Months
missing
==

28 Months
Police
One/Berkut
Yahoo/? FB/Cambridge
Analytica
35 Months 48 Months
Time until breach actually noticed

“Sometime in the next few years we're
going to have our first category-one
cyber-incident; one that will need a
national response.”

2018 so far...
340M Records
150M Records
92M Records
And many, many, many more..
https://en.wikipedia.org/wiki/List_of_data_
breaches

18
Realtime
Verizon cyber report:
“Breaches happen in
minutes, not hours,
days, weeks or months”
"Lightspeed" by Sergei Vavinov is licensed under
CC BY 2.0

An architecture for real-time cybersecurity analytics

Cyber Security Stream Processing Pipeline

Apache SOLR usage in metron
Apache Metron
Stream Processing
pipeline
WARM/COLD INDEX LAYER: Data
Vault, Data Science workbench,
PCAP forensics,...
HOT INDEX LAYER: Real-time
search
Visualisation &
investigation
Apache Metron
Investigator
Apache Zeppelin

Built on top on proven open source big data technology

Profiling by Time
t = 1 t = 2 t = 3 t = n
⬢
⬢
⬢
⬢
⬢
⬢
⬢
⬢

Who is using Apache Metron?
34
• Managed security service providers
• Telstra
• QSight/KPN
• Financial institutions
• Capital One
• Telecom providers
• Automotive industry
• Defense ministries
• Country-wide government initiatives

Apache Metron Ecosystem
36
• Visualisation and Exploration
• Real-time interactive dashboarding
• Infrastructure
• Pre-built appliances optimized for Metron
• Reporting and Compliance
• NIST and other frameworks
https://hortonworks.com/blog/building-a-cybersecurity-eco-system-on-a-shared-data-platform/

Demo Steps
• Uploading blobs to an Fusion Application
• One of those blobs is actually malware
• Fusion logs are ingested in Metron
• Compare the md5 signature of blobs to
know malware
• Metron Investigator UI to triage the scored
events
38

In this session we'll be looking at a number of different organisations who are on their big data cybersecurity journey with Apache Metron, we will take a look at the different usecases they are investigating, the data sources they used, the analytics they performed and in some cases the results they were able to find. We'll also spend some time talking about the common themes in these projects, there are some common approaches to using Apache Metron as a phased project in a project, we'll review some of the common pitfalls and give some concrete suggestions about the things you should (and shouldn't) do when you're getting started. Finally we'll try and tackle some of the key FAQ's that come up when people are first investigating the potential usage of Apache Metron in the real world based on over a year of interacting with customers and prospects as they look deeper into Apache Metron to see how it fits in to their cybersecurity portfolio. Speaker Dave Russell, Principal Solutions Engineer, Hortonworks

Solving Cyber at Scale

DataWorks Summit/Hadoop Summit

Information security is a big problem today. With more attacks happening all the time, and increasingly sophisticated attacks beyond the script-kiddies of yesterday, patrolling the borders of our networks, and controlling threats both from outside and within is becoming harder. We cannot rely on endpoint protection for a few thousand PCs and servers anymore, but as connected cars, internet of things, and mobile devices become more common, so the attack surface broadens. To face these problems, we need technologies that go beyond the traditional SEIM, which human operators writing rules. We need to use the power of the Hadoop ecosystem to find new patterns, machine learning to uncover subtle signals and big data tools to help humans analysts work better and faster to meet these new threats. Apache Metron is a platform on top of Hadoop that meets these needs. Here we will look at the platform in action, and how to use it to trace a real world complex threat, and how it compares to traditional approaches. Come and see how to make your SOC more effective with automated evidence gathering, Hadoop-powered integration, and real-time detection.

Bringing it All Together: Apache Metron (Incubating) as a Case Study of a Mod...

DataWorks Summit

There have been many voices discussing how to architect streaming applications on Hadoop. Before now, there have been very few worked examples existing within the open source. Apache Metron (Incubating) is a streaming advanced analytics cybersecurity application which utilizes the components within the Hadoop stack as its platform. We will attempt to go beyond theoretical discussions of Kappa vs Lambda architectures and describe the nuts and bolts of a streaming architecture that enables advanced analytics in Hadoop. We will discuss the componentry that we had to build and what we could utilize. We will discuss why we made the architectural decisions that we made and how they fit together to knit together a coherent application on top of many different Hadoop ecosystem projects. We will also discuss the domain specific language that we created out of necessity to enable a pluggable layer to enable user defined enrichments. We will discuss how this helped make Metron less rigid and easier to use. We will also candidly discuss mistakes that we made early on.

Scalable and adaptable typosquatting detection in Apache Metron

DataWorks Summit

Typosquatting is a form of cybersquatting (e.g. registering a domain that is similar to an existing domain) where a domain that is a common misspelling of another domain is registered and used for possibly malicious ends. It is an attack that has affected everyone from Google to the televangelist Jerry Falwell and has regulations against it encoded in US law. Even so, it remains extremely popular and particularly heinous and effective when used by advanced malicious actors who may rely on typosquatted domains to gull unwitting users to be more likely to click on a malicious URL in a spearphishing attack. Detecting typosquatting attacks in realtime can be challenging as there are as many ways to typosquat as there are to make typos. Often, intrusion detection systems will generate the typosquatted domains and store them in a database for comparison. However, given the number of domains possible, this is a daunting task storage-wise. Furthermore, this approach can become out of date quickly. We will talk about using sketching data structures in Metron to detect typosquatted domains scalably and adaptably. Furthermore, we will discuss how to ensure that the set of typosquatted domains is kept current with the domains actually seen in an organization's network. CASEY STELLA, Principal Software Engineer, Hortonworks and MICHAEL MIKLAVCIC, Staff Engineer, Hortonworks

Apache SpotAustin Leahy

Designing and Implementing your IOT Solutions with Open Source

DataWorks Summit/Hadoop Summit

Application Programming Interface

Seculert

The cyber threat landscape is becoming more dangerous and challenging all the time. Here, you’ll find a practical, expert-crafted resource to help keep your enterprise secure and successful for the long-term. It’s our way to help you get informed -- and stay safe. Protection API -Transforms your existing devices into a complete APT solution -Complements current network security -Enhances perimeter defenses

Data Science Crash Course

DataWorks Summit

Introduction: This workshop will provide a hands-on introduction to Machine Learning (ML) with an overview of Deep Learning (DL). Format: An introductory lecture on several supervised and unsupervised ML techniques followed by light introduction to DL and short discussion what is current state-of-the-art. Several python code samples using the scikit-learn library will be introduced that users will be able to run in the Cloudera Data Science Workbench (CDSW). Objective: To provide a quick and short hands-on introduction to ML with python’s scikit-learn library. The environment in CDSW is interactive and the step-by-step guide will walk you through setting up your environment, to exploring datasets, training and evaluating models on popular datasets. By the end of the crash course, attendees will have a high-level understanding of popular ML algorithms and the current state of DL, what problems they can solve, and walk away with basic hands-on experience training and evaluating ML models. Prerequisites: For the hands-on portion, registrants must bring a laptop with a Chrome or Firefox web browser. These labs will be done in the cloud, no installation needed. Everyone will be able to register and start using CDSW after the introductory lecture concludes (about 1hr in). Basic knowledge of python highly recommended.

Mool - Automated Log Analysis using Data Science and ML

DataWorks Summit/Hadoop Summit

QE automation for large systems is a great step forward in increasing system reliability. In the big-data world, multiple components have to come together to provide end-users with business outcomes. This means, that QE Automations scenarios need to be detailed around actual use cases, cross-cutting components. The system tests potentially generate large amounts of data on a recurring basis, verifying which is a tedious job. Given the multiple levels of indirection, the false positives of actual defects are higher, and are generally wasteful. At Hortonworks, we’ve designed and implemented Automated Log Analysis System - Mool, using Statistical Data Science and ML. Currently the work in progress has a batch data pipeline with a following ensemble ML pipeline which feeds into the recommendation engine. The system identifies the root cause of test failures, by correlating the failing test cases, with current and historical error records, to identify root cause of errors across multiple components. The system works in unsupervised mode with no perfect model/stable builds/source-code version to refer to. In addition the system provides limited recommendations to file/open past tickets and compares run-profiles with past runs.

Accelerating TensorFlow with RDMA for high-performance deep learning

DataWorks Summit

Google’s TensorFlow is one of the most popular deep learning (DL) frameworks. In distributed TensorFlow, gradient updates are a critical step governing the total model training time. These updates incur a massive volume of data transfer over the network. In this talk, we first present a thorough analysis of the communication patterns in distributed TensorFlow. Then we propose a unified way of achieving high performance through enhancing the gRPC runtime with Remote Direct Memory Access (RDMA) technology on InfiniBand and RoCE. Through our proposed RDMA-gRPC design, TensorFlow only needs to run over the gRPC channel and gets the optimal performance. Our design includes advanced features such as message pipelining, message coalescing, zero-copy transmission, etc. The performance evaluations show that our proposed design can significantly speed up gRPC throughput by up to 1.5x compared to the default gRPC design. By integrating our RDMA-gRPC with TensorFlow, we are able to achieve up to 35% performance improvement for TensorFlow training with CNN models. Speakers Dhabaleswar K (DK) Panda, Professor and University Distinguished Scholar, The Ohio State University Xiaoyi Lu, Research Scientist, The Ohio State University

Omid: scalable and highly available transaction processing for Apache Phoenix

DataWorks Summit

Apache Phoenix is an OLTP and operational analytics for Hadoop. To ensure operations correctness, Phoenix requires that a transaction processor guarantees that all data accesses satisfy the ACID properties. Traditionally, Apache Phoenix has been using the Apache Tephra transaction processing technology. Recently, we introduced into Phoenix the support for Apache Omid—an open source transaction processor for HBase that is used at Yahoo at a large scale. A single Omid instance sustains hundreds of thousands of transactions per second and provides high availability at zero cost for mainstream processing. Omid, as well as Tephra, are now configurable choices for the Phoenix transaction processing backend, being enabled by the newly introduced Transaction Abstraction Layer (TAL) API. The integration requires introducing many new features and operations to Omid and will become generally available early 2018. In this talk, we walk through the challenges of the project, focusing on the new use cases introduced by Phoenix and how we address them in Omid. Speaker Ohad Shacham, Senior Research Scientist, Yahoo Research, Oath

Why is my Hadoop* job slow?

DataWorks Summit/Hadoop Summit

QCon London 2015 - Wrangling Data at the IOT Rodeo

Damien Dallimore

Security From The Big Data and Analytics Perspective

All Things Open

Security event logging and monitoring techniques

DataWorks Summit

Many compliance and regulatory bodies—such as HIPAA "Security Rule" for electronic protected health records (ePHI) or controlled unclassified information (CUI) for defense projects—require logging and monitoring of all access to sensitive data such as patient records or CUI data. The challenge for Hadoop clusters, is that they are complex ecosystems that run a variety of services over multiple nodes. For example, services such as Knox, Ranger, Atlas, Oozie, and Hive differ greatly from each other—each with its own format and schema for tracking data access and each likely running on different nodes within the HDP cluster. Hence, collecting the right set of logs and events for each of the data or security services is the first challenge. Furthermore, security monitoring and threat detection or breach analysis typically relies on correlation of these security events. This implies centralizing logs and events where they can then be normalized, indexed, aggregated, and correlated for analysis in a security information and event management (SIEM) tool such as SumoLogic or Splunk or equivalent. This presentation will share some of the techniques and lessons learned in real-world Haddop implementation at Johns Hopkins. Data will be sanitized as expected. But the focus will be on strategies and techniques used to collect and monitor audit and access log events from key Hadoop services and forwarding to a central server for monitoring, analysis, and response to any suspected breaches or incidents. Automation techniques, such as Ansible scripts to install agents or forwarders uniformly and efficiently across the cluster nodes will also be highlighted where appropriate. CONRAD FERNANDES, Cloud and Cyber Engineering Lead, Johns Hopkins Applied Physics Laboratory

mcubed london - data science at the edge

Simon Elliston Ball

Detecting Hacks: Anomaly Detection on Networking Data

DataWorks Summit

Manage democratization of the data - Data Replication in Hadoop

DataWorks Summit

Enterprise are replicating data on Hadoop to either improve high availability, disaster recovery or just get the data into an ephemeral cluster in the cloud. However being able to do data replication in a location-agnostic and secure way can be challenging using existing solutions. Enterprise are looking into enabling data to be encapsulated and copied seamlessly across the physical private storage and public cloud environments for hybrid data mobility to enable right workload in the right environment for the right use case. Data Lifecycle Manager (DLM) is a new enterprise offering based on open source. DLM is a stepping stone for established enterprises to leverage intelligent replication, backup, and tiering to reach the goal of secure, compliant, governed Business Continuity Planning to satisfy enterprise’s economies of scale. Secure movement of data-at-scale with precise access policies will enable enterprises to reduce capital costs, comply with data governance while democratizing data to grow the business globally. This session will provide an overview of the data replication uses cases, current challenges and provide an introduction to how DLM addresses them. We will discuss hybrid replication challenges of data proliferation with varied volume, velocity and variety using Apache Hive, Apache Ranger and Apache Atlas to protect the data, metadata and security at scale independent of where the data was collected, cured, moved or stored within the confines of an enterprise. Speaker: Saumitra Buragohain, Sr. Director Product Management, Hortonworks

Open Security Operations Center - OpenSOC

Sheetal Dolas

Fighting cybersecurity threats with Apache Spot

markgrover

Apache Metron Meetup May 4, 2016 - Big data cybersecurity

Hortonworks

Why HTTP Won't Work For The Internet of Things (Dreamforce 2014)

kellogh

What's hot

Apache Metron in the Real World

DataWorks Summit

Solving Cyber at Scale

DataWorks Summit/Hadoop Summit

Bringing it All Together: Apache Metron (Incubating) as a Case Study of a Mod...

DataWorks Summit

Scalable and adaptable typosquatting detection in Apache Metron

DataWorks Summit

Apache SpotAustin Leahy

Designing and Implementing your IOT Solutions with Open Source

DataWorks Summit/Hadoop Summit

Application Programming Interface

Seculert

Data Science Crash Course

DataWorks Summit

Mool - Automated Log Analysis using Data Science and ML

DataWorks Summit/Hadoop Summit

Accelerating TensorFlow with RDMA for high-performance deep learning

DataWorks Summit

Omid: scalable and highly available transaction processing for Apache Phoenix

DataWorks Summit

Why is my Hadoop* job slow?

DataWorks Summit/Hadoop Summit

QCon London 2015 - Wrangling Data at the IOT Rodeo

Damien Dallimore

Security From The Big Data and Analytics Perspective

All Things Open

Security event logging and monitoring techniques

DataWorks Summit

mcubed london - data science at the edge

Simon Elliston Ball

Detecting Hacks: Anomaly Detection on Networking Data

DataWorks Summit

Manage democratization of the data - Data Replication in Hadoop

DataWorks Summit

Open Security Operations Center - OpenSOC

Sheetal Dolas

Fighting cybersecurity threats with Apache Spot

markgrover

What's hot (20)

Apache Metron in the Real World

Solving Cyber at Scale

Bringing it All Together: Apache Metron (Incubating) as a Case Study of a Mod...

Scalable and adaptable typosquatting detection in Apache Metron

Apache Spot

Designing and Implementing your IOT Solutions with Open Source

Application Programming Interface

Data Science Crash Course

Mool - Automated Log Analysis using Data Science and ML

Accelerating TensorFlow with RDMA for high-performance deep learning

Omid: scalable and highly available transaction processing for Apache Phoenix

Why is my Hadoop* job slow?

QCon London 2015 - Wrangling Data at the IOT Rodeo

Security From The Big Data and Analytics Perspective

Security event logging and monitoring techniques

mcubed london - data science at the edge

Detecting Hacks: Anomaly Detection on Networking Data

Manage democratization of the data - Data Replication in Hadoop

Open Security Operations Center - OpenSOC

Fighting cybersecurity threats with Apache Spot

Similar to Cybersecurity with Apache Metron and Apache Solr - Ward Bekker, Hortonworks & Scott Cote, Lucidworks

Apache Metron Meetup May 4, 2016 - Big data cybersecurity

Hortonworks

Why HTTP Won't Work For The Internet of Things (Dreamforce 2014)

kellogh

Test Execution Infrastructure for IoT Quality analysis

Axel Rennoch

Recently IoT testing becomes a popular topic in the industry and academic context. New challenges have been identified and existing test methods and techniques need to be collected, optimized and applied. Furthermore, innovative software development approaches are under consideration and partly implemented. However automated test execution still need powerful means and infrastructure. Open source projects like the Eclipse IoT-Testware project can provide valuable tools for advanced testing in IoT. The presentation gives an overview and first results with our IoT test Infrastructure.

The Art of Container Monitoring

Derek Chen

According to service scale, there are hundreds or thousands of running containers in your service. Should we monitor each container by microscope or monitor each microservice by magnifier? This depends which granularity can help us find and solve the problems. In this sharing, I will introduce how to use cAdvisor, Icinga2, InfluxDB and Grafana to build a self-hosted monitoring system. In addition, I also discuss with how to embrace open source and share some practical experiences.

ThroughTheLookingGlass_EffectiveObservability.pptx

Grace Jansen

Our cloud-native environments are more complex than ever before! So how can we ensure that the applications we’re deploying to them are behaving as we intended them to? This is where effective observability is crucial. It enables us to monitor our applications in real-time and analyse and diagnose their behaviour in the cloud. However, until recently, we were lacking the standardization to ensure our observability solutions were applicable across different platforms and technologies. In this session, we’ll delve into what effective observability really means, exploring open source technologies and specifications, like OpenTelemetry, that can help us to achieve this while ensuring our applications remain flexible and portable.

Proactive ops for container orchestration environments

Docker, Inc.

Break -> inspect -> fix is the Ops workflow for infrastructure stacks of the past. Distributed infrastructure and applications claim to be the new generation, but why is it so much more painful to maintain and troubleshoot them? Much of the pain comes from outdated operational models relying on reactive or, worse yet, manual monitoring and Ops. This talk lays out a proactive Ops model for container infrastructure. By focusing on event monitoring, infrastructure state monitoring, trend analysis, and distributed log collection, a proactive Ops model delivers observability for distributed apps that was not possible before. Using real-world examples from Swarm and Kubernetes, we'll demonstrate the tools used and how we relieve Ops pain in container orchestration.

IPv6 Security Talk mit Joe Klein

Digicomp Academy AG

IPv6-Experte Joe Klein gab uns einen Überblick über den aktuellen Status der IPv6-Sicherheit, typische IPv6-Angriffspunkte, Auswirkungen von Technologien wie Cloud und Blockchain sowie Herausforderungen für effektive IoT-Sicherheitsmassnahmen (Internet of Things). Vor allem im Internet der Dinge, wenn es um Gesundheitsversorgung, selbstfahrende Autos, Flugzeugcockpits, Dämme, Kernkraftwerke und ähnliche kritische Infrastrukturen geht, ist es von entscheidender Bedeutung, dass Sicherheit gewährleistet werden kann.

FIWARE Global Summit - Connecting Sensors to FIWARE with IDAS: An Overview

FIWARE

Technology Behind IoT (JNTUK - Unit - 1)

FabMinds

Gustavo Zastrow - Introduction to AWS IoT Core and MQTT

GustavoRuizZastrow

Io t data streaming

ratthaslip ranokphanuwat

เอกสารบรรยายใน ครงการ The 4th NIDA Business Analytics and Data Sciences และการประชุมวิชาการสถิติประยุกต์และเทคโนโลยีสารสนเทศระดับชาติ ประจำปี 2562 คณะสถิติประยุกต์ สถาบันบัณฑิตพัฒนบริหารศาสตร์ วันที่ 30 ตุลาคม – 1 พฤศจิกายน 2562

Analysis of exposed ICS//SCADA/IoT systems in Europe

Francesco Faenzi

The proliferation remote accessible applications and always connected systems, including Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA) networks, real-time remote control systems, IoT devices and all the distributed management technologies, means that the risk of cyber attacks and potentially dangerous threats are increasing and it can only increase in the next years. In this report will be analyzed the distribution and the exposition of these systems, found alive inside the european cyber perimeter, and their services along with a deep analysis of evident bad configurations, easy exploitable vulnerabilities, public and private indicators of compromise and even real and known compromissions already happened. The “Lutech Operational Intelligence - Analysis of exposed ICS, SCADA and IoT systems in Europe” report hereby presented is based on information provided by Lutech Threat Management Service for Cyber Threat Intelligence (L-TMS/CTI).

Iot meets Serverless

Narendran R

Speed and agility are the most expected in today’s analytics tools. The quicker you get from idea to insights, the more you can innovate & perform ad-hoc data analysis. I will be talking about how we can use AWS serverless architecture to stream IoT data, managed by python. We can be up and running in minutes―starting small, but able to easily grow to millions of devices and billions of messages.

5º MeetUP ARQconf 2016 - IoT: What is it really and how does it work?

GlobalLogic Latinoamérica

Devoxx university - Kafka de haut en bas

Florent Ramiere

20160000 Cloud Discovery Event - Cloud Access Security Brokers

Robin Vermeirsch

IoT on azure

Joanna Lamch

ATT&CKing the Sentinel – deploying a threat hunting capability on Azure Senti...

CloudVillage

Speaker 1: Olaf Hartong Speaker 2: Edoardo Gerosa Azure Sentinel, Microsoft's new cloud SIEM solution, was recently released on the market. Notwithstanding its strengths Sentinel offers limited threat hunting capabilities out of the box and setting up an effective hunting solution is not straightforward. The Sentinel ATT&CK GitHub project is designed to provide guidance on setting up an ATT&CK-driven process monitoring solution within Sentinel; giving DFIR professionals a tool to effectively hunt in the Azure cloud. The project, building on previous work from the open source DFIR community, provides instructions on how to properly configure Sysmon to monitor and detect specific processes in alignment with MITRE's ATT&CK framework. Secondly it provides clarity on how to onboard Sysmon logs from Windows virtual machines, shedding light on some poorly documented areas, while also offering an open source parser to correctly ingest Sysmon data in conformity with the Open Source Security Event Metadata information model. Thirdly it offers around 120 open source Kusto Query Language alerts ready for deployment; each mapped to a unique MITRE ATT&CK technique. Fourthly it provides a dedicated threat hunting dashboard to help DFIR professionals monitor their environment and execute precise hunts. Finally, Sentinel ATT&CK provides ready-made hunting queries to be leveraged when responding to alert notifications raised by the threat hunting dashboard. This talk delivers an overview of how the Sentinel ATT&CK project can help organisations establish an effective threat hunting capability in Azure as well as an opportunity to share with the community the strengths and shortcomings of Sentinel when it comes to hunting adversaries within the Microsoft cloud.

All Things Open SDN, NFV and Open Daylight

Mark Hinkle

IoT overview 2014

Mirko Presser

Similar to Cybersecurity with Apache Metron and Apache Solr - Ward Bekker, Hortonworks & Scott Cote, Lucidworks (20)

Apache Metron Meetup May 4, 2016 - Big data cybersecurity

Why HTTP Won't Work For The Internet of Things (Dreamforce 2014)

Test Execution Infrastructure for IoT Quality analysis

The Art of Container Monitoring

ThroughTheLookingGlass_EffectiveObservability.pptx

Proactive ops for container orchestration environments

IPv6 Security Talk mit Joe Klein

FIWARE Global Summit - Connecting Sensors to FIWARE with IDAS: An Overview

Technology Behind IoT (JNTUK - Unit - 1)

Gustavo Zastrow - Introduction to AWS IoT Core and MQTT

Io t data streaming

Analysis of exposed ICS//SCADA/IoT systems in Europe

Iot meets Serverless

5º MeetUP ARQconf 2016 - IoT: What is it really and how does it work?

Devoxx university - Kafka de haut en bas

20160000 Cloud Discovery Event - Cloud Access Security Brokers

IoT on azure

ATT&CKing the Sentinel – deploying a threat hunting capability on Azure Senti...

All Things Open SDN, NFV and Open Daylight

IoT overview 2014

More from Lucidworks

Search is the Tip of the Spear for Your B2B eCommerce Strategy

Cybersecurity with Apache Metron and Apache Solr - Ward Bekker, Hortonworks & Scott Cote, Lucidworks

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Cybersecurity with Apache Metron and Apache Solr - Ward Bekker, Hortonworks & Scott Cote, Lucidworks

Similar to Cybersecurity with Apache Metron and Apache Solr - Ward Bekker, Hortonworks & Scott Cote, Lucidworks (20)

More from Lucidworks

More from Lucidworks (20)

Recently uploaded

Recently uploaded (20)

Cybersecurity with Apache Metron and Apache Solr - Ward Bekker, Hortonworks & Scott Cote, Lucidworks