Cutting-Edge Network Behavior Audit Technology from BMST
Download as PPTX, PDF1 like580 views
The document discusses advanced network behavior analysis and the need for comprehensive security measures due to increasing threats and regulatory requirements. It introduces BMST's session auditor technology that provides real-time monitoring, auditing, and data management to protect organizational IT operations. It also highlights the challenges of addressing insider threats and the importance of maintaining complete records for compliance and forensic investigations.
Cutting-Edge Network Behavior Audit Technology from BMST
- 1. Advanced Network Behavior Analysis , Record and AuditLast Modified: Dec.8 2009Introduction of BMST Technologies
- 2. Agenda1. Opportunity and Business Overview2. Technology and Products 3. Scenarios and Solutions4. Our Customers5. About BMST2©Copyright, BMST Co. 2009December 13, 2009
- 3. What Gartner Top 10 and NSA Say?Gartner TOP 10 20101 Cloud computing, 2 Advanced analytics, 3 Client computing, 4 IT for Green,5 Reshaping the data center 6 Social computing, 7 Security - activity monitoring. …Information security professionals face the challenge of detecting malicious activity in a constant stream of discrete events that are usually associated with an authorized user and are generated from multiple network, system and application sources. At the same time, security departments are facing increasing demands for ever-greater log analysis and reporting to support audit requirements... 8 Flash memory, 9 Virtualization for availability, 10 Mobile applications. Security is not just the perimeter; layered defenses must be inside of the network and on the applications and databases if we really want to protect information. We haven’t done nearly enough to protect applications and databases…and the magnitude of loses around insider threats are underreported. William (Bill) Crowell – former Deputy Director of the NSA3©Copyright, BMST Co. 2009December 13, 2009
- 4. Cloud Flight Needs Cyber “Black Box”How to do forensics in case of a security incident?
- 5. Are you outsourcing? How to handle potential contractual dispute in case of an IT issue?
- 6. Don’t you need compliance? What to show external auditors on complete organization IT operation records?
- 7. How to monitor and find the violation of authorized users in real time?
- 8. How to guarantee the security policy are followed correctly?4©Copyright, BMST Co. 2009December 13, 2009
- 9. Answers from BMSTComplete record and replay
- 11. Smart behavior analysis and Audit
- 15. Tampering-proof authentic “data” management5©Copyright, BMST Co. 2009December 13, 2009
- 16. Session Auditor System ArchitectureSession Auditor is consist of three components: SAS, SAD and SACSession Auditor SensorTransparent deployment
- 17. Bridge-model run
- 18. Session based data recording
- 20. Send recorded data to SADSession Auditor DatacenterSea-volume storage
- 21. Respond to SAC orders
- 22. Smart audit and search
- 23. Security and maintenanceSession Auditor ConsoleCentralized operations and audit
- 25. Policy-based real-time monitoring, alert and response6©Copyright, BMST Co. 2009December 13, 2009
- 26. Session-Auditor DeploymentSSHRDPTelnetICARloginVNCFTPOracleSybase……AdministratorWebApp& Web ServicesEnterprise Apps(ERP/CRM)SASTrafficIT系统管理员/兼职安全管理RecordedServersUnix/LinuxConsoleWindowsNetworkSecuritySADAuditorMission critical企业应用(SAP, Oracle等)
- 27. Critical SystemCritical SystemCritical SystemCritical SystemSASSASSASSASAdministratorSADSADAdministratorSACAuditorDistributed and Hierarchical Deployment
- 28. Unique Value of BMST SA ProductsTransparent audit for RDP, SSH, Citrix/ICA, Oracle, DB2...Complete recording and replayTransparent bridge deploymentHigh availability and distributed deploymentIt’s a long list and growing…12GENERALHTTPS, HTTP, SMTP, POP3, FTP, Telnet, CIFS, Samba...REMOTE ADMINRDP, SSH, VNC,SFTP/SCP, Rlogin, X11…DATABASEMSSQL, Oracle, Sybase, DB2…INDUSTRY SPECIFICCitrix ICA, HP RGS…34ENCRYPTED? NO PROBLEM!Great expandability by open SCRIPTINTERFACE For more details, please refer to http://bmst.net/product/features/9©Copyright, BMST Co. 2009December 13, 2009
- 29. Session Auditor Product FamilySession Auditor Lite is one 2-in-1 appliance, integrated SAS and SADStorageSAS and SAD support distributed and hierarchical deployment, bringing users further flexibilityNetwork Throughput 10©Copyright, BMST Co. 2009December 13, 2009
- 30. Scenarios and SolutionsCloud Computing and IT OutsourcingComplete and authentic organization recordsPotential contractual dispute in case of security incident and IT issueCompliance
- 31. PCI-DSS, SOX, ISO27001, HIPAA, GLBA, SB1836, …
- 32. “Audit”, “Records”, “e-Discovery” are essential to all of them
- 33. Virtual Asset Protection for Online Gaming
- 34. Internal abuse and theft
- 35. Potential lawsuit for virtual assets11©Copyright, BMST Co. 2009December 13, 2009
- 36. Our CustomersSession Auditor has been widely adopted by industry leading customers from telco, finance, service providers, consulting firms, governments and etc. Please visit http://bmst.net/solution for more details.12©Copyright, BMST Co. 2009December 13, 2009
- 37. About BMST Co.Founded at March 2006BMST, which is located at ZGC High-Tech District, Beijing, China, focuses on innovation and development on network security products and technologies. The founders have profound experience at network security, telco, finance and various industries.http://maps.google.com/maps/place?cid=4135994384345121574&q=Bldg%2BA,%2BHuatong%[email protected] (General query)
- 39. [email protected] (Partnership) @bmstdotnet13©Copyright, BMST Co. 2009December 13, 2009
- 40. 14©Copyright, BMST Co. 2009December 13, 2009