13
Managed Detection and Response Answers the Question: “Am I Safe?” Young-Sae Song Vice President, Marketing
| Date post: | 09-Apr-2017 |
| Category: |
Technology |
| Upload: | arctic-wolf-networks |
| View: | 64 times |
| Download: | 0 times |
Managed Detection and Response Answers the Question: “Am I Safe?”
Young-Sae SongVice President, Marketing
2 © 2016 ArcticWolf Inc. All rights reserved.
Am I Safe?
3 © 2016 ArcticWolf Inc. All rights reserved.
Source: Momentum Partners
4 © 2016 ArcticWolf Inc. All rights reserved.
Emerging Group of Service Providers
5 © 2016 ArcticWolf Inc. All rights reserved.
Security Products Today are Focused on Protection
Firewall AntivirusIntrusion Detection SystemAnti-SPAM
Secure Web Gateway
Table Stakes 20%-50% Companies
6 © 2016 ArcticWolf Inc. All rights reserved.
Firewall AntivirusIntrusion Detection SystemAnti-SPAM
Secure Web Gateway
Alert Fatigue
7 © 2016 ArcticWolf Inc. All rights reserved.
Firewall AntivirusIntrusion Detection SystemAnti-SPAM
Secure Web Gateway
Log Analysis Backlog
8 © 2016 ArcticWolf Inc. All rights reserved.
What is Needed Every Day
Security:IDS, firewall, VPN concentrator, web filters, proxies, DLP, honeypots, antivirus, antimalware
Network:Routers, switches, wireless access points
Servers:AD/domain controllers, application servers, file servers, print servers, database servers
Infrastructure Information:Network topology, end users, virtual topology
Threat feeds:Malware, viruses, phishing attachments, suspicious IP addresses
Analysis and Correlation
Someone in Sales logged into engineering servers over the weekend and is communicating to an IP address in a suspicious foreign country.
9 © 2016 ArcticWolf Inc. All rights reserved.
SIEM is Expensive and Resource Intensive
Cybersecurity Effectiveness
Cost
HighLow
Few
Many
Central Log Management
Managed Security Service
Co-managed SIEM
DIY SIEM• Requires significant investment to implement• SIEM professional services costs $2,000 day
• Responsible for hosting, licenses and vendors• Requires active management of relationship
• Alerts are basic and require customers to perform triage and forensics• Any deviation from MSSP process incurs additional costs
• Requires investment for implementation and ongoing management• Threat detection not as strong as SIEM-based options
10 © 2016 ArcticWolf Inc. All rights reserved.
CyberSOC Features Arctic Wolf™
CyberSOCCo-Managed
SIEM Cloud SIEM
Cyber security incident response
Malware and Forensic Analysis
Remediation prioritization and coordination
Security audit data collection and distribution
Dedicated Security Engineer
Security architecture and design
Threat Intelligence Analysis
Vulnerability Assessment
Security consulting and training
Zero False Positives
No Upfront Cost, No Contracts, Month to Month
11 © 2016 ArcticWolf Inc. All rights reserved.
CyberSOC Answers the Question, “Am I Safe?”
12 © 2016 ArcticWolf Inc. All rights reserved.
Customers Love Us
The Arctic Wolf service is no muss no fuss. It deploys in about one hour, and the service has found issues our firewall missed. Our security engineer is top notch, and I consider him an extension of my IT team.
Gleann Shapanka, Director of IT
Compared to Arctic Wolf, Dell SecureWorks was overpriced,provided less services and used older technology. Arctic Wolfdoes everything Dell could and more for a fraction of thebudget, and I am not sacrificing anything
Charles Muller / Director of IT, Threshold
AWN Cyber-SOC is worth its weight in gold. For less than thecost of one full-time person, we get the services of an advancedstate of the art security operations center.
Sean Merrell / Network Administrator, Stevens Aviation
Q&A
[email protected] 1.888.272.8429
Additional Resources:• www.arcticwolf.com• Blog: http://arcticwolf.com/blogs/ • Customers: http://arcticwolf.com/customers/ • Demo: http://arcticwolf.com/schedule-a-demo/
