Is Big Data analytics the next step for SOC's and large companies?

Maat: px

Weergave met pagina beginnen:

Download "Is Big Data analytics the next step for SOC's and large companies?"

Christel Michiels
7 jaren geleden
Aantal bezoeken:

1 Is Big Data analytics the next step for SOC's and large companies? Peter van den Heuvel SecureLink Security BootCamp

2 Cyber Risk Cybersecurity specialists claim that almost every company is already hacked, hack demo's show how easy hackers find their way from a home device to the office environment. IoT devices spread rapidly but security is running behind. Shadow IT and/or badly controlled cloud solutions create Shadow risk. will identity theft shortly enter the business domain? Step by step "traditional "security defence solutions and awareness programs will reach their limits. How can we fight cybercrime in the future? Is big data promoted in other industries also the solution against cybercrime? What are the opportunities and risks? 2

3 Toenemende dreiging 3 Dreiging neemt toe Creeper 1971 Defacing Eerste humoristisch virussen Eerste verstorende virussen (dataverlies) Inbreuk met schade DoS en DDoS Zero day defects Eerste firewall scan software Data diefstal Phishing Ransomware ~90% van de netwerken is geïnfiltreerd 2016?

4 Is awareness afdoende? Toenemende perfectie phishing mails 4

5 Hackers worden steeds slimmer ontvangen of USB gift USB inserted of mail geopend Het virus wordt actief en installeert een Keyboard logger User logt in op privé mail Hacker ziet username en password Hacker Logt in op mail en stuurt mail naar collega Collega opent mail en opent de bijlage. het virus installeert een keyboard logger of remote access Hacker neemt controle pc over en stuurt weer een mail door totdat hij op een pc met voldoende rechten zit. De setup voor ransomware of data diefstal is gereed. Hacker start afpersen. Medewerker 1 Medewerker 2 Thuis Kantoor 5

6 Detectie verhogen met Big Data Analyse Firewall data Actie End point data Verzamelen Structureren Analyse Alert Netwerk data AD data SOC Advies Bron Patroon Detectie (Afwijkingen) Report Stats Bron n 6

7 Cloud Cloud policy? Mogen uw medewerkers cloudoplossingen gebruiken? Is blokkeren een optie? iphone Apps Wetgeving Datalekken Dropbox In Control 7

8 Hoe veilig zijn cloudoplossingen Belangrijke factoren Resources, kennis en middelen voor de beveiliging Risico profiel organisatie Juridisch kader Locatie Toegang tot de Cloud dienst Modus Operandi, Hackers search for the weakest link 8

9 Centrale User Controle Internet And/ Or Secure connection Access verification Token SAML Username password Username password Username password 9

10 Cloud principes Cloud Principles 1. Information is secure 2. Continuity of services is guaranteed 3. Information is as close to home as possible 4. Legal privilege is maintained in the cloud 5. Information is portable 6. Compliance with applicable law is guaranteed, including data protection law 7. Data retention and access management is facilitated 8. "Data ownership" is with Customer 9. Legal risk is sufficiently addressed in a contract 10

11 Voorbeeld toepassen Cloud principes Principle (1) Required for solution (2) Specs Cloud solution A Specs Cloud solution B Information is Secure ISAE3402, Europe based HQ ISO27001 ISEA3402 Continuity of service 99,95% uptime 99,95% 99,98% Data close to home Europe, min 2 countries Poland, India Dld, NL, UK Legal privilege No cooperation to authorities US law Statement, European law Data portability Extract <5 days, delete 3 days, guaranteed deletion 5 days certified deletion Compliance applicable law No privacy data Example Agree to sign data processing agreement Data retention Delete after 5 years Delete flexible Delete 5 years Data Ownership Customer Meta data shared Customer Agree to sign data processing agreement Authentication Multi factor password + location Password + soft key Password, soft key, location. 11

12 Technology Test Flights Locatie Netwerkplein 13:25 14:10 uur

Vergelijkbare documenten

Incidenten in de Cloud. De visie van een Cloud-Provider

Incidenten in de Cloud. De visie van een Cloud-Provider Incidenten in de Cloud De visie van een Cloud-Provider Overzicht Cloud Controls Controls in de praktijk Over CloudVPS Cloudhosting avant la lettre Continu in ontwikkeling CloudVPS en de Cloud Wat is Cloud?