Applied cognitive security complementing the security analyst

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:SESSION ID:
#RSAC
Vijay Dheap
Applied Cognitive Security:
Complementing the Security Analyst
SPO3-W03
Program D...

#RSAC
Quick Insights: Current Security Status
Threats Alerts
Available
analysts
Knowledge
required
Available
time
Economic...

#RSAC
IBM Cognitive Security Study Revealed Gaps Security
Teams want to Address
3
#2 most challenging area today
is optimi...

#RSAC
Platform for
Custom
Analytics
Out-of the-box
Analytics
Rules
Reporting
Pattern
Detection
Search
Evolution of Securit...

#RSAC
Evolving to meet current and future security operations
needs with cognitive enabled cyber security
Grep
Grep
Search...

#RSAC
Cognitive security provides the ability to unlock and action the potential in all data,
internal and external, struc...

#RSAC
Applying Cognitive Security

#RSAC
Cognitive Tasks of a Security Analyst
in Investigating an Incident
8
• Review the incident data
• Review the outlyin...

#RSAC
A tremendous amount of security knowledge is created
for human consumption, but most of it is untapped
Traditional
S...

#RSAC
The Foundation of Cognitive Security
10

#RSAC
A Glimpse into the Brain of Watson for Cyber Security
11
Constantly accumulates and
updates its information to evolv...

#RSAC
Applying Cognitive Security to Empower Security Analysts
• Manage alerts
• Research security events and anomalies
• ...

#RSAC
Initial Objectives and Goals of Cognitive Security
• Consult more information sources than humanly
possible to accur...

#RSAC
Cognitive Security in Action @ SCANA
About SCANA Corporation
Headquartered in Cayce, South Carolina, SCANA is an
ene...

#RSAC
SOC Environment at SCANA
SCANA uses QRadar as our SIEM
Multiple Deployments – separate instances for SCADA / Operati...

#RSAC
16
Client Connecting to Botnet IP
Watson Indicators Botnet IP
QRadar fired an offense on a user
attempting to connec...

#RSAC
17
External Scan
Watson Key Indicators Offense – External Scan
Light external scanning
Looked like Shodan
Analyst wo...

#RSAC
18
Client Malware Download
Watson Key Indicators Client Malware Download
Client attempted Malware download
Malware w...

#RSAC
All Indicators – Watson took 5 minutes
19

#RSAC
What has SCANA gained from Watson?
Speed
Level 1 and 2 Analysts can quickly see scope of issue
Average initial inves...

#RSAC
Thank you! …Questions Anyone?

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 21 Ad

View on Slideshare

1 of 21 Ad