user activity monitoring: your missing security vantage point presented by matt zanderigo

19
USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

Upload: omari-osmon

Post on 16-Dec-2015

213 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

USER ACTIVITY MONITORING:YOUR MISSING SECURITY VANTAGE POINT

Presented by Matt Zanderigo

Page 2: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

76% OF DATABREACHES INVOLVE ACCOUNTS WITH ACCESS TO SENSITIVE DATA

Page 3: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

INFRASTRUCTURE-CENTRIC

HISTORIC APPROACH:

Page 4: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

MACHINE INTELLIGENCESIEM and log management to collect and analyze network and server log data.

Page 5: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

WE FORGOT ABOUTOUR USERS!

Page 6: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

WHO DID WHAT?

Capture & record all user activity

Page 7: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

WHO DID WHAT?

Monitor, Detect and Respond to

user based threats

Page 8: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

WHO DID WHAT?

Page 9: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

Monitor all user activity

Real-time and historical reportingUser behavior analysis and alerting

Rapid deployment

Instant out-of-box value

Integrates with SIEM & IAM

Page 10: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

KEY USE CASES

DETECTION & INCIDENT RESPONSE

DetectInstantly detect changes in actual user behavior that warrant investigation

AnalyzeMonitor and baseline user activity

RespondIsolate users, systems and data in real-time and historically with detailed forensic data

Page 11: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

KEY USE CASES

3RD PARTY VENDOR MONITORING

TransparencyRecord every action vendors perform

AccountabilityHuman-readable audit trails to match with existing SOPs and SLAs

DeterrenceWatch your vendor’s behavior change with video surveillance

Page 12: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

KEY USE CASES

AUDIT & COMPLIANCE

Reduced Audit TimesProduce audit records based on video and plain English

Expanded CoverageBroad coverage for all applications and systems

SimplicitySatisfy PCI, HIPAA, SOX, ISO in minutes, not months

Page 13: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

Session activity alerts

Session alert summary

Page 14: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

Alert indication per screenshot on the timeline

Alert indication per activity

Message suspicious users, and terminate sessions

Page 15: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

1,200+ CUSTOMERS

Page 16: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

OUR CUSTOMERSBUILDING CONFIDENCE“ObserveIT gives us the confidence of allowing admins and remote vendors to do their work, while ensuring that our data is secure and audited. We also use the product to document IT processes and installations.”

Premier League

Page 17: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

OUR CUSTOMERSBUILDING CONFIDENCE“As soon as vendors discovered that all actions are being recorded, it became much easier to manage them.”

Coca-Cola Company

Page 18: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

OUR CUSTOMERSBUILDING CONFIDENCE“We enjoy showing off to our customers that every user action is recorded. This increases confidence all around.”

Bellin Treasury

Page 19: USER ACTIVITY MONITORING: YOUR MISSING SECURITY VANTAGE POINT Presented by Matt Zanderigo

THANK YOUMatt Zanderigo

[email protected]

717-946-0241