Cyber Exposure - Categoría Moderna de Gestión
•Descargar como PPTX, PDF•
0 recomendaciones•243 vistas
Siguiendo la actual transformación digital, su superficie de ataque moderna está expandiendo. Aprenda cómo puede ver, medir y comprender el riesgo cibernético en su empresa
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Similar a Cyber Exposure - Categoría Moderna de Gestión
Similar a Cyber Exposure - Categoría Moderna de Gestión (20)
Más de Cristian Garcia G.
Más de Cristian Garcia G. (20)
Último
Último (20)
Cyber Exposure - Categoría Moderna de Gestión
- 1. Cyber Exposure Categoría Moderna de Gestión Meriane Moreira Moisés Acevedo TM Comercial, Sur América Regional Channel SE, LATAM mmoreira@tenable.com macevedo@tenable.com 1
- 2. Adopción Global “Viral” del scanner Nessus 2Utilizado en mas de 140 países Alrededor Del Mundo
- 3. Tenable • Fundado en el año 2002 • Logro una adopción viral y generalizada de Nessus • Proveemos Tenable.io desde el 2017 para introducir la primera plataforma en “Cyber Exposure” y evolucionar la gestión del riesgo digital • Es de incesante innovación: "Tenable tiene un valor de marca [masivo] con Nessus, pero [es] una de las compañías más avanzadas en VM". Forrester, 2017 100% Top 10 US Tech Companies 50% Fortune 500 80% Top 10 US Financial Institutions 1000+ Empleados 1.6M Usuarios Globales 25,000+ Clientes
- 4. Abril 2011 Patente Passive Vulnerability Management Innovación Implacable para Clientes 2013 10m de Descargas Octubre 2011 DoD Assured Compliance Assessment Solution (ACAS) Agosto 2012 SecurityCenter Continuous View Abril 2015 Nessus Agent Julio 2004 Tenable PVS y LCE liberados 4 Productos Julio 2010 Patente “Continuous Monitoring” Oct 2012 Patente User Tracking Mayo 2013 Patente Credential-less Network Scanning Diciembre 2006 Primeros chequeos SCADA liberados Mayo 2008 Anuncio Subscripciones Professional y Home / Nessus Noviembre 2009 Nessus nombrado como “uno de los productos de seguridad de los últimos 20 años” Diciembre 2010 Nessus Perimeter Cloud Service Enero 2003 Nessus 2.0 Open-source 2007 2008 2009 2010 2011 2012 20132005 2006200420032002 2014 2015 2016 2017 Enero 2003 SecurityCenter Enero 2005 Nessus 3.0 Comercial y Código Protegido Abril 2017 Tenable.io Febrero 2015 Nessus Cloud y Manager Julio 2017 Tenable.io WebApp y Container Security Feb 2015 Industrial Security Agosto 2007 Apoyo a IPv6 Nessus y PVS Febrero 2014 Detección de Malware Añadido
- 5. La superficie de ataque esta en expansión 5 Servidores Escritorios Infra de Comunicaciones ICS/SCADAIoT Industrial Apps de Web Móvil Portable s IoT Empresarial Maquinas Virtuales Nube Contenedores TI Cloud IoT
- 6. Surge una brecha, el Cyber Exposure “Gap” 6 Servidores Escritorios Infra de Comunicaciones ICS/SCADA Apps de Web Móvil Portable s IoT Empresarial Maquinas Virtuales Nube Contenedores TI Cloud IoT IoT Industrial
- 7. Medir y manejar su superficie de ataque moderna, y efectivamente entender y reducir el riesgo digital. Cyber Exposure Es una disciplina emergente para: 7
- 8. Las cuatro preguntas claves 8 ? ¿Donde estamos expuestos? ¿Donde deberíamos priorizar basados en el riesgo? ? ¿Cómo estamos reduciendo nuestra exposición en el tiempo? ?
- 9. Cyber Exposure: Complementa la Gestión de Vulnerabilidades 9 Lograr “ver” mas “Hacer”Mas Cyber Exposure Visibilidad Abarcadora: Cualquier activo, en cualquier plataforma de computación Gestión de Vulnerabilidades Activos de TI Tradicionales Métricas técnicas Cyber Exposure Profundidad de inteligencia: Priorización, benchmarking, decisión apoyo Cyber Exposure
- 10. Evaluar AnalizarRemediar Medir Apoyando el ciclo de vida completo del Cyber Exposure 10 IoT OT Nube TI Descubrir Identificar y mapear todo activo para visibilidad en cualquier ambiente computacional Entender la condición de todos los activos incluyendo vulnerabilidad, mala configuración, y otros factores de salud operacional Entender exposición en contexto, priorizar remediación basado en la criticidad del activo, contexto de la amenaza y severidad de la vulnerabilidad Modele y analice el riesgo digital para tomar mejores decisiones de negocio y de tecnología Priorice cual exposición arreglar primero, si es posible, y aplicar la técnica de mitigación apropiada
- 11. Tenable.io: primera plataforma para el “Cyber Exposure” Servicios de Plataforma e Integración Gestión de Vulnerabilidad Escaneo de Aplicaciones Web Seguridad en Contenedores Scanner Nessus Nessus Agent Nessus Network Monitor Registro de Imágenes Visibilidad Completa Sobre todo Activo Priorización y Orientación Flexibilidad: Nube o En-sitio Ecosistema Tenable Data de 3ros Activos Vulnerabilidades Amenazas Ecosistema Tenable Sistemas de 3ros CMDB Sist. Manejo de TI GRC Reportes, Dashboards, Priorización Scanner Web App
- 12. Service Desk / Ticketing / Workflow Endpoint Security SIEM and Security Analytics Governance, Risk and Compliance (GRC) Patch Management IP Address Management Network Access Control CMDB Partnering for customer success: Example integrations 14 Public Cloud Platform Network Monitoring Credential & Privileged Access Management Mobile Device Management (MDM)
- 13. 15 Muchas Gracias!Meriane Moreira Moisés Acevedo TM Comercial, Sur América Regional Channel SE, LATAM mmoreira@tenable.com macevedo@tenable.com Tenable SSA latam-ssa@tenable.com
Notas del editor
- I can’t emphasize enough how valuable the Nessus community has been to Tenable and will be in the future. It has allowed Tenable to cost effectively gain marketshare through this viral sales and marketing engine. Companies spends 10’s of millions of dollars and can’t make the dent we have with Nessus in the market.
- We’re a “fifteen year young” company with the wisdom of experienced security professionals, and the ambition of industry pioneers. From Nessus to SecurityCenter to Tenable.io, Tenable has defined and re-defined vulnerability management. With Cyber Exposure, we’re raising the bar and innovating even faster than ever – all so we can solve your hardest problems. We’re honored by the company we keep – including over half of the Fortune 500 and leading organizations in every industry and geography.
- Second, innovation is in our DNA. From a sensor perspective, we didn’t stop innovating the Nessus engine. Customers would throw out crazy requests and we would do try to meet the requirements - one example of that is that the US Navy wanted to be able to scan ships at sea over a satellite link - we figured out how to accomplish that. We also didn’t stop with just Nessus being our only way to collect vulnerability information on networks. We developed technologies and processes that improved the vulnerability management data collection problem. We released a sniffing technology to close the gaps between scans. Today you know that product as the Nessus Network Monitor. It was released in 2004 - ahead of it’s time - but as you can see became a foundational technology for the discovery of mobile and cloud assets as well as a foundational technology for our Industrial security offerings. We released the Nessus Agent to track the state of mobile assets. From a platform perspective, we have pushed the envelope every year and challenged the status quo on what a modern Vulnerability Management platform should deliver to an enterprise. Moved the industry to making every device visible. Moved the industry from periodic to continuous assessments. Moved the industry to intuitive dashboarding to increase time to value. This is just a sample of the many product and feature enhancements over the last 15 years. All of these are cumulative. Tenable.io benefits from all of the foundational tech bricks that have been laid over the years.
- Every security leader wants to answer 4 questions for their CEO or Board: Where are we exposed? This means what assets are affected, where, and what is the significance/severity? The changing technology and threat landscape has made this harder to see. Where should we prioritize based on risk? Data overload and lack of security staffing have made this more important than ever. How are we reducing exposure over time? Security leaders want to understand and report on their progress, and show the value of their investments to senior management. How do we compare to others – particularly those in our industry? Security needs to be put into perspective. What is an appropriate level of security for one industry (ex education) might be vastly different from another (ex. financial services). Knowing where one stands amongst peers is crucial in developing budgets and deploying corporate resources. This is about seeing more and doing more – what is the true state of my environment and how can I effectively secure it?
- We’ve talked about vision and direction. Now let’s look at how Tenable is helping organizations like yours today. With Tenable.io, we introduced a Cyber Exposure platform for any asset on any computing platform. It offers all the benefits of a modern SaaS (cloud) solution, and is also available in on-prem software form. With Tenable.io, we offer applications for specific business problems: Vulnerability Management, Web App Scanning, Container Security – and more to come. You can buy any or all of those applications. These apps leverage the data sensors in the bottom row. And unlike other vendors, we give you unlimited active scanners, agents, and passive network monitoring at no extra cost. Container security is especially important because containers represent the newest blind spot for many organizations. Tenable.io assesses container images before they’re deployed into production, and integrates into your container build process and SDLC (software development lifecycle). We also built a specialized application for web application scanning. It provides superior accuracy and safe scanning of critical web apps. Tenable.io integrates with many 3rd party solutions to bring data in and send data to other systems, supporting your broader business processes. It also includes an extensive and well documented API and SDK. Tenable.io is also the only solution that provides true asset tracking (not IP-based), so you can see the real state of your assets and vulnerabilities. Across all of your applications and data, we provide reporting, dashboarding and prioritization – so you can see and act with confidence. Tenable.io even scales to the largest organizations. It was deployed by a Fortune 100 company to over a million assets in 100 days.
- I mentioned that only Tenable.io provides support for the full range of assets – from servers and network infrastructure to cloud, containers, web apps, and IoT. The way it does this is through our unique combination of Nessus vulnerability scanners and data sensors. Only Tenable offers: Nessus active scanners – the #1 vulnerability assessment technology in the world – most comprehensive, accurate, and high performing scanner Agents – for devices that are not always on your networks Passive network monitoring – for continuous visibility into all assets, and assessment of safety-critical assets that can’t be scanned Web application scanner – automated application security testing Container image registry – so you can bring security into the software development lifecycle (SDLC) and support the developer’s workflow With this breadth of asset coverage, you can finally see any asset on any platform – from IT to Cloud to IoT. Without them, you’re flying blind. And only Tenable offers this flexibility and power.
- In addition to Tenable.io, we offer Nessus which provides single-point-in-time vulnerability scanning, and SecurityCenter which provides vulnerability management for traditional IT assets.
- NNM is the same as sold with .io. NNM is extended to include IS plugins when managed by the IS Console. All IT NNM plugins will also continue to operate.
- NNM is the same as sold with .io. NNM is extended to include IS plugins when managed by the IS Console. All IT NNM plugins will also continue to operate.