Name: Using a Security Data Lake to Reduce SIEM Costs
Start: 2023-12-19T01:00:00Z
End: 2023-12-19T01:00:32.000Z
Location: BrightTALK
Rating: 0

Gigamon offers a deep observability pipeline that harnesses actionable network-level intelligence to amplify the power of observability tools. This powerful combination enables IT organizations to assure security and compliance governance, speed root-cause analysis of performance bottlenecks, and lower operational overhead associated with managing hybrid and multi-cloud IT infrastructures.

The DoD Cybersecurity Reference Architecture is emerging as one of the key Zero Trust Architecture models for both government agencies and commercial enterprises. It is a detailed – and practical – architecture that clearly outlines the steps toward implementing Zero Trust.     

Please join Executive and Zero Trust Thought Leaders, Live Action CEO and Co-Founder, John Smith, and Bassam Khan, Vice President of Product and Technical Marketing, as they discuss:  
- How to meet Network, Orchestration/Automation and Visibility/Analytics requirements  
- How to manage encrypted data   
- The importance of Lateral or East-West visibility in Zero Trust

Mapping to DoD Zero Trust Capabilities: A Practical Guide

Unlocking Speed, Precision, and Efficiency in NDR 

NDR is a critical component in most organizations’ cybersecurity tool stack, and ExtraHop is one of the leaders in the NDR market. The Gigamon Deep Observability Pipeline increases the speed and precision of ExtraHop’s threat detection by ensuring it has access to all network traffic regardless of whether this is data center or cloud traffic. Join WWT, ExtraHop and Gigamon experts as they discuss how ExtraHop and Gigamon combine to provide: 

- The fastest, most precise, and efficient network threat detection 
- Access to lateral, encrypted and container traffic to eliminate blind spots  
- Massively reduced cloud traffic access costs

Maximizing Network Threat Detection: Enhancing Security

As organizations migrate to the cloud, they face a new wave of cybersecurity challenges. Today’s security measures frequently fall short in detecting and responding to threats that move laterally across virtual infrastructure, often using encryption to hide. In this webinar, we will cover how a single cybersecurity program built on network visibility across hybrid cloud environments can lead to effective threat management against today’s attacks. 

 

Join us as we discuss: 

 

- Ransomware attack techniques, focusing on virtual lateral traversal 

- Deep packet inspection’s role in identifying and mitigating network threats 

- Illuminating blind spots in your hybrid cloud environments to reduce risk posed by lateral movement offensive techniques  

- Incident response strategies for rapid containment and remediation of network threats 

- Best practices for integrating threat management into your hybrid cloud security architecture 

 

Attendees will gain a deeper understanding of the latest threats using network traffic as an attack vector and walk away with actionable insights to improve their organization's hybrid cloud security posture from comprehensive network visibility.

Cybersecurity Fundamentals: Building Strong Defenses from Network Observability

2024년 글로벌 정보 보안 지출이 2,150억 달러에 이를 것으로 예상되지만, 오늘날의 조직들은 사이버 범죄자들에 대해 점점 더 뒤처지고 있습니다. 전 세계 1,000명 이상의 보안 및 IT 리더를 대상으로 한 연례 설문 조사에서, 우리는 점점 더 복잡해지는 하이브리드 클라우드 인프라를 보호하고 관리하는 데 있어 사이버 보안의 도전 과제와 최우선 사항을 조사했습니다. 설문 조사 결과, 3분의 1의 조직이 기존 도구를 사용하여 지난 12개월 동안 데이터 유출을 감지하지 못했다고 합니다. 그 이유는 무엇일까요? 우리의 CSO 차임 마잘과 함께 이 기조 연설 세션에 참여하여 설문 조사 주요 내용, 사이버 보안 현황에 대한 통찰력, 그리고 조직이 준비 상태 격차를 해소하기 위해 어떻게 적응해야 하는지에 대해 들어보세요.

사이버 보안 산업의 현황: 준비 상태 격차를 해소하는 방법

GigaVUE-OS and GigaVUE-FM offer a rich set of features and capabilities - so many that users can be overwhelmed. In this session, we’ll highlight five high-value features that you may not know about but that could dramatically improve the return on your investment, optimize your workflows, make your tools more efficient, and help keep your networks healthy and secure.

Five Capabilities of GigaVUE-OS and GigaVUE-FM You May Not Know

The need to inspect encrypted traffic is critical given the prevalence of encrypted malware lurking in our midst. But with over 90 percent of enterprise data being encrypted, managing this traffic and determining when and where to decrypt it remains a significant challenge for many organizations. Gigamon provides a range of decryption solutions and in this session, we’ll explore the pros and cons of the most common deployment scenarios and help you to learn how to decide which model is most efficient and effective for your organization.

Decryption Lessons Learned: The Most Efficient Deployment Models

개회 기조연설에 참석하여 Shane Buckley 사장 겸 CEO의 최신 비즈니스 및 시장 업데이트를 들으시고, 이어서 Chief Product Officer인 Michael Dickman의 Gigamon Deep Observability Pipeline에 대한 최신 기술 혁신 업데이트와 향후 로드맵을 엿볼 수 있는 시간을 가지세요. 이 세션에서는 Gigamon을 통해 하이브리드 클라우드 인프라를 보다 안전하게 관리하는 데 기여한 고객들을 인정하는 2024 Giga HERO 고객상 발표도 포함됩니다.

선도 기업을 위한 하이브리드 클라우드 네트워크 보호: 비즈니스 및 기술 업데이트

From an operational perspective, using an agentless solution such as mirroring for virtual traffic access seems ideal. Nothing to install, easier to manage, less expensive etc. In fact, the opposite is true. Agent-based traffic access solutions are easier to configure, yield higher performance, and usually cost less than their agentless counterparts.  In this session, we’ll expose the myths and misconceptions about using an agent for traffic access. We’ll also discuss why agents for traffic access are different than traditional tool agents and explain why they might be the best option for your network.

To Tap or Not to Tap and When is an Agent Not an Agent

Cloud platforms like AWS, Azure, and GCP are modern marvels with immense scalability and flexibility. These benefits can also come with sticker shock when your cloud environment is not optimized.  For example, complex tapping and mirroring architectures often lead to unnecessarily high billing costs, especially for packet-based security tools like Cloud Network Detection & Response. In this session, we’ll examine alternative designs and solutions to the default monitoring options from public cloud platforms that can save you a bundle in infrastructure costs.

How to Slash Cloud Monitoring Costs

IDC 분석가인 Stephen Elliot, I&O, 클라우드 운영 및 DevOps 그룹 부사장이 진행하는 이 키노트 세션에 참여하세요. 이 세션에서 그는 가시성과 보안의 교차점, 그리고 현대 하이브리드 클라우드 인프라의 보안 및 관리를 위한 네트워크 텔레메트리의 확대되는 역할에 대한 최신 트렌드를 공유할 것입니다. Stephen은 팀 간에 공유 데이터를 활용하여 도구를 최적화하고, 분석을 간소화하며, 협업을 강화하는 방법의 가치를 논의하며, 비즈니스 성과를 최적화하기 위한 모범 사례를 공유할 것입니다.

IDC 리서치: 가시성과 보안 — 같은 동전의 양면

Explore the synergy between Cribl and Gigamon in enhancing data observability, network performance and security.  In today’s data driven landscape, organizations face the challenge of managing vast amounts of data while ensuring performance, security and compliance. This session will show how Cribl’s innovative data routing and transformation capabilities, combined with network intelligence from the Gigamon Deep Observability Pipeline, enable organizations to gain deeper insights that streamline operations, and power informed decisions.

Optimizing Data Observability: Harnessing the Power of Cribl and Gigamon

The public cloud has been a game-changer for many organizations. In contrast to traditional on-premises architectures, it enables applications to be deployed with flexibility and agility. The downside is that public cloud costs can be high and, in some cases, exorbitant when it comes to adding management capabilities like ensuring visibility. Join Gigamon CFO, Dave Arkley, and resident cost-expert Ryan Mahoney, as they detail how Gigamon helps you to gain the pervasive cloud visibility you need while lowering your total cost of ownership by up to 80 percent.

Gain Cloud Visibility and Lower TCO by up to 80 Percent

공공 클라우드는 많은 조직들에게 게임 체인저가 되었습니다. 전통적인 온프레미스 아키텍처와 달리, 공공 클라우드는 애플리케이션을 유연하고 민첩하게 배포할 수 있게 해줍니다. 그러나 단점은 공공 클라우드 비용이 높을 수 있으며, 가시성 확보와 같은 관리 기능을 추가할 때 비용이 과도하게 증가할 수 있다는 점입니다. 기가몬 CFO인 데이브 아클리와 비용 전문가 라이언 마호니가 기가몬이 어떻게 퍼베이시브 클라우드 가시성을 제공하면서도 총 소유 비용(TCO)을 최대 80%까지 절감할 수 있는지 자세히 설명합니다.

클라우드 가시성을 확보하고 TCO를 최대 80%까지 절감하세요

Join us for an insightful panel discussion on Closing the Cybersecurity Preparedness Gap with Deep Observability, featuring Gigamon customers. This session will delve into the security challenges facing CISOs today, moderated by Gigamon Chief Security Officer Chaim Mazal. Customers will share real-world experiences, strategies, and solutions they have implemented to better secure and manage their hybrid cloud infrastructure. Gain valuable insights on strengthening your organization's hybrid cloud security posture.

Customer Panel Discussion: Closing the Cybersecurity Gap, Moderated by Gigamon CSO

Gigamon Product Clinic #3: GigaVUE Cloud Suite Dependencies - AWS Ports & Protocols

Join us for another clinic in our GigaVUE Cloud Suite Dependencies series. We will cover the details of AWS ports and protocols that you need to be familiar with if you are installing, configuring, and operating our products.

GigaVUE Cloud Suite Dependencies - AWS Ports & Protocols

Imagine the possibilities when service providers can easily access valuable insight about their mobile subscriber base. Information such as what devices and OTT applications subscribers are using as well as when and where they use the mobile network. Marketing, advertising, infrastructure planning, customer service, and product development can all benefit from better subscriber insight, but traditional approaches to collect this data have been costly and complex. In this session, we will cover the latest Gigamon solution innovation that cost-effectively delivers enriched mobile subscriber metadata directly to data lakes and analytics engines, enabling service providers to realize the full potential of subscriber data.

Learn What’s Possible with Enriched Mobile Subscriber Analytics

딥 가시성을 통해 사이버 보안 준비 격차를 해소하는 방법에 대한 유익한 패널 토론에 함께하세요. 이 세션에서는 기가몬 고객들이 참여하여 오늘날 CISO들이 직면한 보안 과제를 논의할 예정이며, 기가몬 최고 보안 책임자인 차임 마잘이 진행합니다. 고객들은 하이브리드 클라우드 인프라를 더 안전하게 관리하기 위해 실제 경험과 전략, 그리고 그들이 구현한 솔루션을 공유할 것입니다. 귀사의 하이브리드 클라우드 보안 태세를 강화하기 위한 귀중한 인사이트를 얻으세요.

고객 패널 토론 – 사이버 보안 격차 해소, 기가몬 CSO의 사회로 진행

Not knowing whether a performance bottleneck is caused by the network or the application itself often leads to a “blame game” among application, network, and cloud teams. This finger pointing can delay resolution and also stifle collaboration. Join us to learn how Gigamon can help you to more quickly and precisely pinpoint the root cause of performance bottlenecks and finally end the “blame game”.

End the “Blame Games” with High-Precision App Troubleshooting

Visibility into Applications, Workloads and Traffic: Secret Life of Your Network

Supercharging Public Sector and Education Technology and Security

Practical Advice for Inline and Out-of-Band Decryption

Getting the Most from your Investment in Microsegmentation

Analyst Research on Supercharging Observability and AIOps with Network Telemetry

What Gigamon Brings to Observability

Maximize Existing Security Tools - Address Palo Alto CVE-2024-3400 Vulnerability

Why Firewalls Are No Longer Enough

Gigamon Analyst Connection: 5 Pragmatic Tips for Preventing Ransomware

Security Automation Architecture Strategies

Protect Your Edge And Tactical Environments With Gigamon Deep Observability

RiskyBiz Podcast: Precryption™ Technology

Shedding Light on Encrypted Lateral Traffic: Precryption™ Technology Unveiled

Precryption™ – the New Decryption

Securing Your Borders: Evolving Each Layer of Your Security Program

Modern Security Portfolio – Toolsets Organizations Need Now

Gain Visibility into Encrypted Core and 4G+5G Converged Core

Maximizing Tools Efficiency, Minimizing Carbon Footprint

Application Intelligence Best Practices: Leveraging Layer 4-7 Capabilities

How to Get Ahead of Network Issues

Delivering a Superior Application User Experience

TechFix: Unleash Maximum Efficiency with Network Optimization

SIEMs are one of the most important but also one of the most expensive security tools employed today. However, with the advent of high-performance cloud-based databases and low-cost storage, organizations — including Gigamon — are using these technologies to develop SIEM capabilities at a fraction of the cost of traditional SIEMs. In this session, we will highlight the potential financial and operational benefits of this approach and examine key issues when designing and deploying a security data lake.

Using a Security Data Lake to Reduce SIEM Costs

SEIM

Data Lake

Network Security

IT Cost Management

Cloud Cost Management

Cloud Migration

Security Risk Management

Cloud Architecture

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Using a Security Data Lake to Reduce SIEM Costs

Presented by

About this talk

More from this channel