+ All Categories
Home > Documents > Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14...

Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14...

Date post: 16-Mar-2020
Category:
Upload: others
View: 1 times
Download: 0 times
Share this document with a friend
22
Proprietary information of Ingram Micro Inc. Do not distribute or duplicate without Ingram Micro's express written permission. © Ingram Micro Inc. 1 Cisco Stealthwatch u Službi Cyber Security Servisa Dragan Ilić Cyber Security Consultant SEE CCIE, CISSP
Transcript
Page 1: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.© Ingram Micro Inc.1

Cisco Stealthwatch u Službi Cyber

Security Servisa

Dragan Ilić

Cyber Security Consultant SEE

CCIE, CISSP

Page 2: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.2

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.

Agenda

2

▪ Cyber Security Trendovi

▪ Uloga Stealthwatch-a

▪ Komponente Stealthwatch rešenja

▪ Cyber Security Servisi

Page 3: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.3

The Security Market

Security Services Market Trend is Healthy

Most of the Security Solutions Issues Can Be Addressed With Services

The Service Part Of Security Projects Is Higher

Page 4: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.4

Stealthwatch Enhances Visibility Across your Entire

Business

Page 5: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.5

Visibility Through NetFlow

Page 6: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.6

The General Ledger

Page 7: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.7

Host Groups: Situational Awareness

Page 8: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.8

Segmentation Monitoring with Stealthwatch

Page 9: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.9

Behavioral and Anomaly Detection Model

Page 10: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.10

Investigating a Host

Page 11: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.11

Rapid Threat Containment

Page 12: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.12

Stealthwatch – Security and Network Monitoring

Page 13: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.13

Required Core Components

Page 14: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.14

Cisco ISE and pxGrid Integration

Page 15: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.15

Flow Sensor

Page 16: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.16

UDP Director

Page 17: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.17

Proxy License

Page 18: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.18

Stealthwatch Endpoint Concentrator

Page 19: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.19

Actionable Threat Intelligence

Page 20: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.20

Security Online Visibility Assessment (SOVA)

Page 21: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

1405002 rev 6.27.14

Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.21

Coming & Ingram Micro Partnership

Basic Technical Services

Public Discovery

Web App Assessment

Vulnerability Assessment

Penetration Testing

Web Malware detection

PCI DSS ASV Scan

Source code review

Data Leakage Prevention

Configuration review

Consultancy Services

Governance & Strategy

Policies & Procedures

Compliance Assessment

Risk Assessment

Multi-Vendor Security Architecture

Access Control Assessment

Managed Security Services

Regular Assessment

SOCaaS

Security Monitoring

Incident Response

Digital Forensics

Threat Intelligence

Page 22: Cisco Stealthwatch u Službi Cyber - konferencija.coming.rs · CCIE, CISSP. 1405002 rev 6.27.14 Proprietary information of Ingram Micro Inc. —Do not distribute or duplicate without

22Confidential and proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.Proprietary information of Ingram Micro Inc. — Do not distribute or duplicate without Ingram Micro's express written permission.22


Recommended