Security Operations Center (SOC)

The future of security operations depends on AI agents, not LLMs

Posted on by Admin
The future of security operations depends on AI agents, not LLMs

What are AI agents? “Is it an Agent, or just a Program?” is a widely cited paper which has seen more than 5,000 citations, highlighting the complexity of this intuitive question. Stuart Russell and Peter Norvig, in their well-regarded AI textbook titled “Artificial Intelligence: A Modern Approach,” define an agent as “anything that can be viewed as perceiving its environment through sensors and acting upon that environment through actuators.” For example, a wall thermostat measures…

Read More

Cisco Live Melbourne SOC Report

Posted on by Admin
Cisco Live Melbourne SOC Report

Executive Summary Cisco has long provided security services for third party events such as the Black Hat and RSA Conferences, as well as the Super Bowl and the Olympic games. These services come in the form of products (Cisco Security Cloud capabilities, including Umbrella, XDR, Malware Analytics, etc. plus Splunk Enterprise Security); and skilled Security Operations Centre (SOC) analysts, who build and operate the infrastructure and hunt for threats, from both inside and outside the…

Read More

Navigating the Convergence of NOC and SOC for Cisco Managed Services Providers

Posted on by Admin
Navigating the Convergence of NOC and SOC for Cisco Managed Services Providers

In the evolving landscape of managed services, Cisco Managed Services providers are increasingly looking to expand their offerings by integrating Security Operations Center (SOC) capabilities with their existing Network Operations Center (NOC) services. This convergence is driven by the need for a unified approach to managing both network and security operations, leveraging common tools and platforms to enhance efficiency and service delivery.    Understanding NOC/SOC Convergence  The convergence of NOC and SOC services begins with…

Read More

Black Hat Europe 2024 NOC/SOC: Security Cloud

Posted on by Admin
Black Hat Europe 2024 NOC/SOC: Security Cloud

Cisco is the Official Security Cloud Provider for the Black Hat Network Operations Center (NOC). We work with the other official partners to bring the hardware, software and engineers to build and secure the network, for our joint customer: Black Hat.  Arista: Wired and Wireless Network Equipment  Corelight: Open Network Detection and Response  Palo Alto Networks: Network Security and SOC Platform  This was our 8th year supporting Black Hat Europe and the primary mission in…

Read More

Why data protection is non-negotiable for every business

Posted on by Admin
Why data protection is non-negotiable for every business

Every morning, I start my day by reading the news, and every morning, I see headlines about major cyberattacks and breaches causing damage to companies, brands, and people around the world. The barrage of attacks and the damage that goes with them are relentless. Attackers will always be on the lookout for soft targets, but my experience has taught me that implementing some basic yet powerful protections can shield most organizations from ransomware attacks and…

Read More

SOC Findings Report From RSA Conference 2024

Posted on by Admin
SOC Findings Report From RSA Conference 2024

For October Cybersecurity Awareness month, Cisco and NetWitness released the Security Operations Center (SOC) Findings Report from RSA Conference (RSAC) 2024. Since 2017, the SOC has been an educational exhibit at RSAC. The purpose is to monitor the network activity during the event and provide SOC tours and a session during the conference. From the tours and session — and this Findings Report published by sponsors Cisco and NetWitness — you can learn about what…

Read More

Black Hat 2024: SOC in the NOC

Posted on by Admin
Black Hat 2024: SOC in the NOC

The Black Hat Network Operations Center (NOC) provides a high-security, high-availability network in one of the most demanding environments in the world: the Black Hat event. The NOC partners are selected by Black Hat, with Arista, Cisco, Corelight, Lumen, NetWitness and Palo Alto Networks delivering from Las Vegas this year. Cisco is the official Domain Name Service, Malware Analysis and Mobile Device Management provider. The Meraki team is writing a blog about the experiences in…

Read More

Why security professionals experience burnout

Posted on by Admin
Why security professionals experience burnout

In this episode of The Security Podcasts featuring Thomas Kinsella, Co-Founder & Chief Customer Officer at Tines, we discuss why security professionals experience burnout and how security leaders can prevent it.  “If you’re trying to build out a mature security team, you can’t have a huge amount of turnover,” Kinsella says. “You need a mature team that’s able to stick around for a little while. If you’ve got teams that are burnt out, there’s going…

Read More

Operationalizing our custom “SOC in a Box” at the RSA Conference 2024

Posted on by Admin
Operationalizing our custom “SOC in a Box” at the RSA Conference 2024

Ever had to stand up a Security Operations Center (SOC) in two days? This is the monumental challenge faced by Cisco engineers at various events and conferences around the globe throughout the year. You may ask, “How is it possible to deploy a full-fledged SOC with just two days of preparation?” The key to being able to make the nearly impossible happen is our custom “SOC in a Box”. It’s essentially a roadshow case, racked…

Read More

Cisco & Splunk: A Complete SOC Platform Purpose-Built for the AI-Driven Future

Posted on by Admin
Cisco & Splunk: A Complete SOC Platform Purpose-Built for the AI-Driven Future

Organizations come in all shapes and sizes. From big companies to small, local companies to multi-nationals, unregulated to highly regulated — the size and sophistication of organizations operating in today’s economy is incredibly diverse. Equally, the size and sophistication of their security operations also varies. The reality is that there is not a one-size-fits-all approach to security operations. That is why I am so excited about the integration of Cisco XDR and Splunk Enterprise Security….

Read More
1 2 3 … 6