Presenter: Ryan Babbitt
To protect against breaches, many companies rely primarily on endpoint security measures like anti-malware, anti-phishing, data loss prevention, and/or network security measures. These solutions stop many simple threats and negligent or unintentionally insecure behaviors, but attackers are resourceful and persistent. Constant vigilance is still needed to detect, contain, and respond to malicious attackers and insider threats that thwart or circumvent security controls. For this, log management and security monitoring solutions have risen in popularity due to their capabilities for real-time monitoring, alerting, and investigation of application and system activity; however, they still require significant subject matter knowledge to be made efficient and correlate events between siloed application and system assets. In our presentation, we offer a fresh perspective on security intelligence that focuses on the human dimension -- on users, their business roles, and their access. We describe how existing IAM practices and tools, whether commercial or homegrown, can provide the missing context and rules needed to better identify at-risk, compromised, and malicious users and accounts and improve traceability and accountability of their activities.
Ryan Babbitt is a Senior Solutions Architect with Zirous. He joined Zirous in 2012 after completing a M.S. in Computer Science at Iowa State. His time at Zirous has been spent leading and implementing high quality solutions in the IAM space, including Identity Governance, Access Management and MFA, and Privileged Access Management. His interests lately have also included security monitoring and SIEM technologies, particularly as they relate to IAM. He enjoys analyzing complex technical issues, learning new technologies, and is always up for a good discussion.
Holmes Murphy & Associates
2727 Grand Prairie Pkwy
Waukee, IA 50263
If you can't physically attend, you can use our webcast. Below is the information for connecting.
Monthly ISSA Chapter Meeting
Please join my meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/247310853You can also dial in using your phone. United States +1 (872) 240-3412 Access Code: 247-310-853