Security analytics firewall is a solution to fight against the cyber threats - PowerPoint PPT Presentation

View by Category
About This Presentation
Title:

Security analytics firewall is a solution to fight against the cyber threats

Description:

security analytics firewall is the most promising solution to fight against cyber threats and fraud as it, allows us to get ahead of the attackers by detecting risks and restrict them – PowerPoint PPT presentation

Number of Views:9
Slides: 10
Provided by: rver21

less

Write a Comment
User Comments (0)
Transcript and Presenter's Notes

Title: Security analytics firewall is a solution to fight against the cyber threats


1
LTS SECURE UEBA FOR DEVICES
2
CONTENT
  • LTS Secure UEBA for Devices
  • Advantages of UEBA
  • Use Cases
  • Firewall Configuration Analytics
  • Rules are created/modified in a particular time
    span.
  • Rules are not executed in a particular time span.
  • Visibility

3
LTS SECURE UEBA FOR CLOUD APPS
  • UEBA (User Entity Behavior Analytics) is the
    most promising solution to fight against cyber
    threats and fraud as it allows us to get ahead of
    the attackers by detecting risks and restrict
    them.
  • UEBA successfully detects malicious and abusive
    activity that otherwise goes unnoticed, and
    effectively consolidates and prioritizes security
    alerts sent from other systems. Organizations
    need to develop or acquire statistical analysis
    and machine learning capabilities to incorporate
    into their security monitoring platforms or
    services. Rule-based detection technology alone
    is unable to keep pace with the increasingly
    complex demands of threat and breach detection.
  • PAE uses UEBA to provide insights on cyber
    security and analytics. Our solution analyses
    volumes of data to establish a baseline of normal
    user and system behavior, and flag suspicious
    behavior anomalies. The result is a sophisticated
    artificial intelligence platform that detects
    insider and cyber threats in real time.

4
ADVANTAGES OF UEBA
  • Provides behaviour based analytics for detecting
    insider and targeted cyber attacks.
  • User centric monitoring across hosts, network and
    applications
  • Privileged account monitoring and misuse
    detection
  • Provides huge reduction in security events
    warranting investigations

5
USE CASES
  • Firewall configuration analytics- Keep an eye on
    the changes being made to the network security
    infrastructure. Administrators may make some
    intentional or unintentional error or carry out
    an improper change while acting on a firewall
    configuration change request giving room for
    breaches. This Firewall Change Management report
    precisely helps in detecting such events. It
    helps find out who made what changes, when
    and why. Not only that, it alerts you in
    real-time on your mobile phone when changes
    happen. The Firewall change management can
    generates alerts for the Firewall device
    configuration changes in real-time and it
    notifies via Email, HTTP alerts.

6
  • Rules created / modified in a particular time
    span- This will help to analyze the rules crated
    / modified in a particular time frame. i.e.
    last 24 hours. This will be useful to monitor
    administrator activity on day to day basis and
    would be very effective to find such occurrences.
    Tracking the number of rules modified within a
    particular time span can ensure no security
    mishap.

7
  • Rules not executed in a particular time span-
    Administrator creates lot of rules on need basis
    and forgets to remove them if not required. After
    a certain period of time, we will be having a
    huge set of rules in firewall which may not be
    even executing for a long period time. This
    report would help to find such rules which can be
    removed from the system and can help the
    administrator to manage the system more
    efficiently.

8
VISIBILITY
  • The system provides trend of events happening
    over a period of time which would help the system
    analyst to understand the behavior of such events
    and can predict the trends of such occurrence.
    This would prove very helpful in finding or
    investigating critical system issues.

9
About LTS SECURE
  • LTS Secure offers a Security Suite to
    rationalize, prioritize automate response to
    risks in your environment. Comprehensive Cyber
    Security Solutions with continuous monitoring at
    all layers of the IT stack network packets,
    flows, OS activities, content, user behaviors and
    application transactions.
  • To know more about LTS SECURE, contact us at
    enquiry_at_leosys.net or call us at 800-689-4506
  • Visit us at http//ltssecure.com
About PowerShow.com