Name: Using Packet Intelligence in Securing the Modern Enterprise Network Environment
Start: 2022-12-08T18:00:00Z
End: 2022-12-08T18:58:22.000Z
Location: BrightTALK
Rating: 5

Current DDoS and Cyber Threat strategies, best practices and latest trends.

This webinar will be presented in Spanish.

Este seminario web se centra en la evolución de los ataques cibernéticos en 2023, según el ”Threat Intelligence Report” de NETSCOUT 2H22 , y cómo detenerlos con una mitigación inteligente de múltiples capas.  Obtenga información sobre la mitigación de "multicapa inteligente" que combina ISP/Cloud DDoS, BGP-Flowspec y defensas perimetrales de la empresa y por qué ahora es más importante que nunca.

Los ataques actuales, que provienen del exterior y del interior de la empresa, deben detectarse y mitigarse rápidamente para limitar su impacto. Explicaremos el concepto de mitigación "inteligente de múltiples capas" y cómo funciona. Descubra cómo se utiliza esta mitigación para detener ataques externos e internos, ataques a dispositivos "con tablas de estado" (stateful) como FW, VPN e IDS, y varios ataques a la capa de aplicación, incluido el tráfico cifrado.

Los Ataques Ciber en 2023 vs. la Mitigación Inteligente de Multi-Capas

This webinar will be presented in German.

Heutige DDoS Angriffe sind nicht nur hochentwickelt und vereinen mehrere Angriffsvektoren, sondern sie werden von den Attackern auch adaptiv durchgeführt. Cyberkriminelle überwachen dabei ihre Angriffseffektivität und verändern oder kombinieren die Angriffsverktoren dynamisch um vorhandene Schutzmaßnahmen zu umgehen.

9 von 10 global agierende Tier-1 Service Provider nutzen NETSCOUT Arbor Lösungen, um den heutigen DDoS Herausforderungen gerecht zu werden. Eines der Resultate ist, dass NETSCOUT´s Security Operations Center (SOC) unter anderem daraus die aktuellen Trends in diesem Umfeld analysieren und bewerten kann. Diese Ergebnisse werden halbjährlich zusammengefasst und in dem DDoS Threat Intelligence Report vorgestellt.

NETSCOUT möchte Sie zu einem Webinar einladen, in dem wir Ihnen die aktuellen Erkenntnisse dieses Threat Reports erläutern und dabei beleuchten wie adaptive DDoS Angriffe ausgeführt werden und wie Sie Ihr Unternehmen davor schützen können.

Nehmen Sie an unserem Webinar teil und schauen Sie sich an …:
• …welche aktuellen Angriffstrends wir sehen!
• …welche Attack-Vektoren derzeit besonders häufig und welche   
                  weniger häufig gesehen wurden!
• ...wie moderne „Adaptive“ DDoS Angriffe aufgebaut sind und...
• …wie SIE sich am besten davor schützen können!

DDoS Threat Intelligence Report: „Adaptive DDoS“ und neue Threat Insights

DDoS attacks continue to increase in size, frequency, and complexity. Attackers are getting more sophisticated in selecting their targets and attack vectors.  To stay abreast of the latest DDoS threats, organizations need to rely upon global DDoS threat intelligence.

Derived from unmatched visibility into 50% of global Internet traffic, in this webinar, NETSCOUT will share findings from the latest DDoS Threat Intelligence Report, including:

• There were 6,78 million attacks in 2H 2022, an increase of 13% over 1H 2022, culminating in 13 million attacks for all of 2022

• The top DDoS attack vectors, the continued rise in TCP direct-path, carpet bombing, application layer, and DNS water torture attacks

• What tactics 1.35 million bots from malware families like Mirai, Meris, and Dvinis are using to generate hundreds of thousands of attacks

• And more…

Learn how NETSCOUT’s Arbor DDoS protection solutions, fueled by the global, highly curated ATLAS Intelligence Feed (AIF), can automatically block DDoS attacks targeting your environment.

Use Global Visibility and Threat Intelligence for Your Local DDoS Protection

The DDoS threat landscape continues to change at a rapid pace. Because Carrier and Internet Service Providers play a vital role in protecting customers and the Internet at large from DDoS attacks, it’s imperative that you stay abreast of the latest DDoS attack trends. 

Join us in this webinar to explore the latest DDoS attack stats and trends from NETSCOUT’s DDoS Threat Intelligence Report, how they impact  Carrier and Service Providers, and how you can identify and mitigate attack impact:

• 13 million DDoS attacks globally! Get the details: counts, duration, bandwidth, and more
• See Regional and Country trends 
• Discover the most common DDoS attacks vectors, tactics, and techniques. (think Botnets, multi-vector attacks) 
• Learn about the link between DDoS attacks and global events including Ukraine-Russia kinetic warfare

Use NETSCOUT’s global threat intelligence and Arbor Adaptive DDoS defense to automatically detect and stop DDoS attacks.

13 million DDoS Attacks - What You Need to Know

Webinar Focus: Education Sector

During this Webinar, several key players in the Education sector – JISC, City University, and South Staffs College – will explain why they have chosen to complement their DDoS Cloud protection with NETSCOUT Arbor Edge Defence, an on-premise DDoS solution.

Our panel will discuss the need for uninterrupted online lectures and seminars and how NETSCOUT Arbor Edge Defense (AED) has:

• Ensured uninterrupted online lectures and seminars

• Provided protection from ransomware and cyber-theft

• Detected and blocked low level application attacks

• Improved IT performance for a range of internet reliant services

• Provided a Return on Investment in the order of 200%

The Panel includes independent experts and users from:

• JISC - Ben Crowther, Security Analyst

• South Staffs College - Jason Whitaker, Director of IT and Project Performance

• City University - Paulo Leal, Network Team Leader

• Academia - James Ferguson, Cyber Security Practise

• NETSCOUT - Brian Gregory, Security Overlay

Why Complement Your Cloud DDoS Products With NETSCOUT’s On-Prem DDoS Solutions

Join this discussion and gain insight on:
• Understanding the right questions to ask to ensure you are choosing, building and implementing the right type of DDoS protection that meets the needs of your organization and aligns to your unique circumstances.
• The critical differences between the types of DDoS attack protection solutions including CDN, ISP, ISP agnostic, on-premises, hybrid, and the risks they mitigate and the risks they do not mitigate.
• NETSCOUT Arbor DDoS solutions that provide best-in-class solutions for identifying and managing the mitigation and detection of DDoS and other threats to the network, surgically removing DDoS attack traffic from your network without disrupting key network services, inline security appliances deployed at the network perimeter, on-demand cloud-based solutions, and managing the systems, tuning them to industry best practices, and managing DDoS incident response.
• Best Practices in DDoS Defense including strategy, tactics, keep components, automation and proper coverage to detect, thwart and stop DDoS attacks from doing damage.

One Size Does NOT Fit All When it Comes to DDoS Protection

This webinar will be presented in Italian.

Quasi tutti i CISO aziendali hanno in corso progetti di impiego delle tecnologie SIEM ed XDR considerati strumenti necessari per riprendere il controllo di un’infrastruttura IT il cui perimetro risulta essere sempre meno chiaro e definito.
Questo webinar spiega perché i suddetti strumenti, pur necessari, non siano più sufficienti e come, con l’uso appropriato della tecnologia NDR, si possano combattere efficacemente le minacce informatiche.

Scopri il concetto di "DPI-based NDR" e come questo fornisce dati “intelligenti” e cronologia per integrare XDR, SIEM e Security Data Lake.
NETSCOUT spiegherà come utilizzare i metadati della tua rete per il monitoraggio delle minacce, il rilevamento e le analisi forensi Back-In-Time degli attacchi Zero Day.

XDR e SIEM: possono esistere senza NDR?

Join this discussion and gain insight on:
• Making sense of DDoS attack trends, the latest network and security research and analysis, and recommended best practices from industry experts that can be deployed in your environments.
• Utilizing best-in-class on premises stateless solution that automatically detects and intelligently mitigates DDoS attacks and other cyber threats.
• Leveraging cloud-based, fully managed DDoS protection services consisting of fifteen global scrubbing centers and more than fifteen Tbps of attack mitigation capacity.
• Deploying intelligently automated hybrid DDoS protection that combines on-premise and cloud working in concert to provide the best protection, reduced OpEX, and lowest Total Cost of Ownership.

Defeating Adaptive DDoS Attacks in Superhero Fashion

This webinar will be presented in Spanish.

Actualmente la mayoría de CISO están gestionando proyectos SIEM y EDR.  ¡Aparentemente la única forma de recuperar el control de la infraestructura de TI empresarial en evolución actual !

Este seminario web explica las nuevas tendencias de ciberseguridad como XDR, Data Lake y NDR y porqué están creciendo. Conozca el concepto de "NDR basado en DPI" y cómo proporciona "datos inteligentes" e históricos para complementar  las soluciones de XDR y Data Lakes. Consulte los ejemplos de casos de uso de "NDR avanzado" para XDR, SIEM y Data Lake.

El stack tecnologico empresarial de hoy en día es heterogéneo y está fuera de control.  NETSCOUT compartirá ‘best practices’ sobre cómo usar los metadatos de su red para la monitorización y detección de amenazas, así como la capacidad de análisis forense retrospectivo ante ataques de día cero.

XDR, SIEM y Data Lake: ¿Pueden existir sin NDR?

The DDoS threat landscape continues to change at a rapid pace. Because Internet Service Providers play a vital role in protecting your customers and the Internet at large from DDoS attacks, it’s imperative that you stay abreast of the latest DDoS attack trends.

Join us in this webinar as Patrick Donegan, industry analyst and founder of HardenStance and Roland Dobbins, Principal Engineer from NETSCOUT, explore key findings from NETSCOUT’s latest DDoS Threat Intelligence Report.

Get up-to-speed on the latest:

• Global and country DDoS attacks statistics

• Most common DDoS attacks vectors, tactics and techniques

• How DDoS attacks are linked to Ukraine-Russia kinetic warfare

And most importantly, learn the best practices in Adaptive DDoS defense

Need to Know: Findings from NETSCOUT’s DDoS Threat Intelligence Report

Join this discussion and gain insight on:
• The different types of Cyber Threat Intelligence (CTI) and the value they provide to supporting and enhancing your Cyber Defense strategy, development and execution.
• Active Threat Level Analysis System (ATLAS) that delivers unique visibility into one-third or all internet traffic correlated into meaningful, understandable and usable intelligence to enable organizations to better understand, defend and react to threats.
• Context and actionable DDoS threat intelligence via ATLAS, Internet-wide security trends, mitigation guidance for new DDoS attack vectors and attack campaigns, designing new DDoS detection / classification / traceback / mitigation mechanisms, and leveraging NETSCOUT expertise for complex, high-impact DDoS attacks.
• ATLAS Intelligence Feed (AIF) which provides unique information to automatically arm NETSCOUT Arbor DDoS attack protection solutions with the latest DDoS attack tactics, known sources of DDoS attacks and Indicators of Compromise to automatically protect organizations from DDoS attacks and other cyber threats.

Smartly Using Global Threat Intelligence in the Fight Against DDoS Attacks

Join this discussion and gain insight on:
• Exposing myths, common misunderstandings and flat-out un-truths regarding state exhaustion DDoS attacks, application layer DDoS attacks, capabilities of firewalls, CDN based DDoS protection, cloud only protection and other common cybersecurity sentiments.
• Evolving defensive strategies to keep pace with rapidly changing attack tactics and strategies of criminal actors and nation states.
• Industry best practices you may not know about that will improve your preparedness, refine your cyber defense strategies, help you defend more effectively and efficiently and reduce your risk.
• Relationship of DDoS attacks to other cyber security threats like Ransomware, infiltration, exfiltration, and reconnaissance and how to strengthen your cyber defenses with achievable mitigation strategies.

You Think You Know DDoS?  Think Again

This webinar will be presented in German.

NETSCOUT schützt die kritische Unternehmens-Infrastruktur der „Connected world“ vor Ausfällen und unterschiedlichsten Faktoren der Cyber-Kriminalität.

Erfahren Sie anhand zweier praxisnaher Beispiele, was Sie Zero-Day Exploits oder Angriffe auf die State-Table Ihrer Infrastruktur entgegensetzen können.

Haben Sie das Risiko minimiert, dass Angreifer eines Tages DOCH Ihren Perimeter überwinden? Sehen Sie in einer Live-Demo, wie Sie solche Szenarien erkennen und adressieren können.

Nach mir die SYN-Flood !?? – Netzwerkvisibilität ist wichtiger denn je!

The key to solving complex IT ops problems collaboratively is to build a common engineering approach to managing risk across the concerns of the security and network ops teams – in other words, a holistic approach to managing risk known as Risk Engineering.

Join Intellyx analyst Jason Bloomberg and NETSCOUT in this webinar when we discuss:

• How the NetOps concept of Site Reliability Engineering (SRE) can be applied to Cybersecurity

• Why network packet data is the ultimate source for comprehensive Observability and the foundation of Risk Engineering

• How NetSecOps teams can utilize NETSCOUT’s Deep Packet Inspection and Adaptive Service Intelligence technologies to create a common source of packet-derived data for collaboration and reduction of IT risk

Packet-Based Risk Engineering – A Novel Approach for NetSecOps Teams

RÉSUMÉ : 
Cyberattaques de 2023 en pleine évolution Vs. Atténuation « multicouche-intelligente » 

Comme expliqué dans le webinaire 1 de cette série, « Advanced NDR » est un catalyseur clé pour les tendances XDR et Data Lake Sécurité.   Et dans le webinaire 2 nous avons présenté comment « Advanced (DPI-Based) NDR » les complète - notamment avec les quatre cas d'utilisation : (1) Early Warning, (2) Attack Surface, (3) Contact Tracing, (4) Back-in-Time.   

Ce webinaire 3, qui s’adresse aux RSSI et aux gens de profils techniques cybersécurité, se concentre sur l'atténuation intelligente-multicouches des attaques en plein d’évolution, pour compléter les initiatives XDR et Data Lake Sécurité.    
La plupart des fournisseurs d’Internet et de Cloud offrent une cyber-protection, et que plusieurs « éléments » de réseau/sécurité opérés par l’entreprise peuvent être utilisés pour bloquer les mauvais flux basés sur l’intelligence IoC, pourquoi le concept d'atténuation « multicouche intelligente » ?
Ce webinaire couvrira les raisons pour lesquelles les nouvelles cyberattaques en évolution nécessitent de nouvelles mesures d'atténuation. Comment les attaques d'aujourd'hui, venant de l'extérieur et de l'intérieur de l'entreprise doivent être détectées et mitigées rapidement pour limiter leur impact. Et comment, même les « éléments » de sécurité tels que le FW et l'IDS « statefull » peuvent faire l'objet d'attaques (et doivent être protégés).  Ceci, ensemble, constitue l’atténuation intelligent-multicouche).

Cyberattaques 2023 en évolution ! vs. Atténuation « multicouche-intelligente »

Cyber attackers can level organizations with a distributed denial-of-service (DDoS) attack. How do security teams keep stakeholders informed when services are down? Who do they call to remediate the incident and ensure the attackers don’t knock everything down again? Will the right people have the right access to the right resources if the worst happens? In this webinar, learn what processes and procedures should go into the DDoS response playbook, and learn about the tools and techniques that can be used to detect, classify, traceback, and mitigation DDoS attacks before they impact services.

When you attend this webinar, you'll learn:

- The latest tactics and techniques of Adaptive DDoS attacks

- The minimal requirements for building a DDoS response playbook

- How to determine and orchestrate the best method of mitigation per DDoS attack type

Every DDoS Resilience and Response Playbook Should Include These Things

RÉSUMÉ :  
 « NDR Avancé (basé sur DPI) » les cas d’utilisation  (NETSCOUT)

Comme expliqué dans le webinaire 1 de cette série, « Advanced NDR » est un catalyseur clé pour les tendances XDR et Data Lake Sécurité.   Ce webinaire explique quatre exemples de cas d'utilisation : (1) Early Warning , (2) Attack Surface, (3) Contact Tracing, (4) Back-in-Time, et s'adresse aux RSSI, aux responsables, et techniciens de la cybersécurité.     
  
Après 10 ans de croissance du BYOD, du télétravail, et des réunions virtuelles, les cybermenaces s'adaptent et se multiplient … la plupart des RSSI ont désormais déjà des projets « EDR » -- le monitoring à partir des terminaux « end-points » pour détecter et répondre aux cybermenaces et constitue une bonne approche pour adresser les attaques provenant des End-Points.    
  
Mais,  « on ne peut pas protéger ce que on ne voit pas » !    Les entreprises d’aujourd'hui recherchent une source de données pour la surveillance des menaces, dans un environnement hétérogène (Multi-Cloud + On-Prem + Hosting + SaaS + Endpoints).   Le NDR avancé, basé sur le DPI des paquets réseau, convertit les paquets bruts de vos réseaux privés en métadonnées "intelligentes" utilisables et stockables, pour permettre une visibilité, une surveillance, une détection et une réponse complètes aux menaces, ainsi qu'une enquête « Back-in-Time » sur les attaques Zero Day.

NDR Avancé (basé sur DPI): Démo d’utilisation pour XDR et Data Lake Sécurité

In today’s world of enterprise security, many technology options are available—perhaps too many. Despite all the options available, security teams still ask the same questions: What is the “right” telemetry? How do we best integrate, and where can we find the best return on our investment?

In response to these questions, and the need to disrupt adversary TTPs, eXtended Detection and Response (XDR) technologies have emerged. XDR looks to combine telemetry from multiple sources and integrate with “next-step” technologies that allow for automated data correlation, enrichment, and response. However, we cannot achieve a successful strategy without the inclusion of network telemetry.

In this webcast, SANS Instructor Matt Bromiley and NETSCOUT IT and Computer Specialist Erik Hjelmstad look at the necessity of including network detection and response (NDR) capabilities in your XDR strategy. The network is one of the most important areas of any enterprise, and an extremely important source to detect adversary activity. XDR cannot exist without NDR, so make sure you’re including it in your security stack too!

XDR Does Not Exist Without NDR

Omdia recently conducted a research study on how organizations use and benefit from packet-derived data.  

Join us as the study author, Fernando Montenegro, explores the interesting findings including:

• How organizations use packet-based visibility for troubleshooting and protecting applications migrated to the cloud

• How a common source of packet-based data can be leveraged by both network and security teams to reduce Mean Time to Resolution (MTTR)

We will introduce NETSCOUT’s Omnis Cyber Intelligence, an advanced NDR solution that uses highly scalable deep packet inspection technology to provide comprehensive network visibility, threat detection, and investigation.

Using Packet Intelligence in Securing the Modern Enterprise Network Environment

Cyber Security

Cyber Attacks

Network Detection and Response

Cloud

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

The IT project management community on BrightTALK includes thousands of IT project and portfolio management professionals. Find relevant webinars and videos on agile methodologies, scrum strategy, project management processes and more. Attend live webinars or view on demand content presented by recognized thought leaders in the IT project management industry.

IT Project Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Using Packet Intelligence in Securing the Modern Enterprise Network Environment

Presented by

About this talk

More from this channel