Cutting-Edge Network Behavior Audit Technology from BMST
Download as PPTX, PDFâ˘1 likeâ˘580 views
The document discusses advanced network behavior analysis and the need for comprehensive security measures due to increasing threats and regulatory requirements. It introduces BMST's session auditor technology that provides real-time monitoring, auditing, and data management to protect organizational IT operations. It also highlights the challenges of addressing insider threats and the importance of maintaining complete records for compliance and forensic investigations.
Cutting-Edge Network Behavior Audit Technology from BMST
- 1. Advanced Network Behavior Analysis , Record and AuditLast Modified: Dec.8 2009Introduction of BMST Technologies
- 2. Agenda1. Opportunity and Business Overview2. Technology and Products 3. Scenarios and Solutions4. Our Customers5. About BMST2ŠCopyright, BMST Co. 2009December 13, 2009
- 3. What Gartner Top 10 and NSA Say?Gartner TOP 10 20101 Cloud computing, 2 Advanced analytics, 3 Client computing, 4 IT for Green,5 Reshaping the data center 6 Social computing, 7 Security - activity monitoring. âŚInformation security professionals face the challenge of detecting malicious activity in a constant stream of discrete events that are usually associated with an authorized user and are generated from multiple network, system and application sources. At the same time, security departments are facing increasing demands for ever-greater log analysis and reporting to support audit requirements... 8 Flash memory, 9 Virtualization for availability, 10 Mobile applications. Security is not just the perimeter; layered defenses must be inside of the network and on the applications and databases if we really want to protect information. We havenât done nearly enough to protect applications and databasesâŚand the magnitude of loses around insider threats are underreported. William (Bill) Crowell â former Deputy Director of the NSA3ŠCopyright, BMST Co. 2009December 13, 2009
- 4. Cloud Flight Needs Cyber âBlack BoxâHow to do forensics in case of a security incident?
- 5. Are you outsourcing? How to handle potential contractual dispute in case of an IT issue?
- 6. Donât you need compliance? What to show external auditors on complete organization IT operation records?
- 7. How to monitor and find the violation of authorized users in real time?
- 8. How to guarantee the security policy are followed correctly?4ŠCopyright, BMST Co. 2009December 13, 2009
- 9. Answers from BMSTComplete record and replay
- 11. Smart behavior analysis and Audit
- 15. Tampering-proof authentic âdataâ management5ŠCopyright, BMST Co. 2009December 13, 2009
- 16. Session Auditor System ArchitectureSession Auditor is consist of three components: SAS, SAD and SACSession Auditor SensorTransparent deployment
- 17. Bridge-model run
- 18. Session based data recording
- 20. Send recorded data to SADSession Auditor DatacenterSea-volume storage
- 21. Respond to SAC orders
- 22. Smart audit and search
- 23. Security and maintenanceSession Auditor ConsoleCentralized operations and audit
- 25. Policy-based real-time monitoring, alert and response6ŠCopyright, BMST Co. 2009December 13, 2009
- 26. Session-Auditor DeploymentSSHRDPTelnetICARloginVNCFTPOracleSybaseâŚâŚAdministratorWebApp& Web ServicesEnterprise Apps(ERP/CRM)SASTrafficITçłťçťçŽĄçĺ/ĺ źčĺŽĺ ¨çŽĄçRecordedServersUnix/LinuxConsoleWindowsNetworkSecuritySADAuditorMission criticaläźä¸ĺşç¨(SAP, Oracleç)
- 27. Critical SystemCritical SystemCritical SystemCritical SystemSASSASSASSASAdministratorSADSADAdministratorSACAuditorDistributed and Hierarchical Deployment
- 28. Unique Value of BMST SA ProductsTransparent audit for RDP, SSH, Citrix/ICA, Oracle, DB2...Complete recording and replayTransparent bridge deploymentHigh availability and distributed deploymentItâs a long list and growingâŚ12GENERALHTTPS, HTTP, SMTP, POP3, FTP, Telnet, CIFS, Samba...REMOTE ADMINRDP, SSH, VNC,SFTP/SCP, Rlogin, X11âŚDATABASEMSSQL, Oracle, Sybase, DB2âŚINDUSTRY SPECIFICCitrix ICA, HP RGSâŚ34ENCRYPTED? NO PROBLEM!Great expandability by open SCRIPTINTERFACE For more details, please refer to http://bmst.net/product/features/9ŠCopyright, BMST Co. 2009December 13, 2009
- 29. Session Auditor Product FamilySession Auditor Lite is one 2-in-1 appliance, integrated SAS and SADStorageSAS and SAD support distributed and hierarchical deployment, bringing users further flexibilityNetwork Throughput 10ŠCopyright, BMST Co. 2009December 13, 2009
- 30. Scenarios and SolutionsCloud Computing and IT OutsourcingComplete and authentic organization recordsPotential contractual dispute in case of security incident and IT issueCompliance
- 31. PCI-DSS, SOX, ISO27001, HIPAA, GLBA, SB1836, âŚ
- 32. âAuditâ, âRecordsâ, âe-Discoveryâ are essential to all of them
- 33. Virtual Asset Protection for Online Gaming
- 34. Internal abuse and theft
- 35. Potential lawsuit for virtual assets11ŠCopyright, BMST Co. 2009December 13, 2009
- 36. Our CustomersSession Auditor has been widely adopted by industry leading customers from telco, finance, service providers, consulting firms, governments and etc. Please visit http://bmst.net/solution for more details.12ŠCopyright, BMST Co. 2009December 13, 2009
- 37. About BMST Co.Founded at March 2006BMST, which is located at ZGC High-Tech District, Beijing, China, focuses on innovation and development on network security products and technologies. The founders have profound experience at network security, telco, finance and various industries.http://maps.google.com/maps/place?cid=4135994384345121574&q=Bldg%2BA,%2BHuatong%[email protected] (General query)
- 39. [email protected] (Partnership) @bmstdotnet13ŠCopyright, BMST Co. 2009December 13, 2009
- 40. 14ŠCopyright, BMST Co. 2009December 13, 2009