big data security intelligence & siemconcert.or.kr/suf2015/pdf/suc-1.pdf · 2015-12-04 · why...

23
Big Data Security Intelligence & SIEM 전 병국(케이사인)

Upload: others

Post on 14-Aug-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Big Data Security Intelligence & SIEM

전 병국(케이사인)

Page 2: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

발표 순서

Ⅰ. Big Data Trend

Ⅱ. Why Security Intelligence?

Ⅲ. Big Data Security Intelligence

Ⅳ. SIEM for Big Data

Ⅴ. Ksign WizLook(Big Data Platform & SIEM)

Page 3: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ
Page 4: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅰ. Big Data Trend

• 60초 내 축적되는 데이터…

※ Source: Go-Globe.com

Page 5: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅰ. Big Data Trend

• 빅데이터 전망

Page 6: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅰ. Big Data Trend

• 빅데이터 마스터 플랜

※ Source: 국가 정보화 빅데이터 마스터 플랜

Page 7: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅰ. Big Data Trend

• 세계 빅데이터 시장 규모 전망

Page 8: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅰ. Big Data Trend

• 국내 빅데이터 시장 규모 전망

Page 9: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅱ. Why Security Intelligence?

• IT 발전에 따른 새로운 응용기술 등장

Page 10: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅱ. Why Security Intelligence?

• 보안 인식의 변화

Page 11: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅱ. Why Security Intelligence?

• 경계선 보안의 한계성

Page 12: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅱ. Why Security Intelligence?

• Security Intelligence 필요성

Page 13: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅲ. Big Data Security Intelligence

• 빅데이터 Vs 보안 빅데이터

Page 14: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅲ. Big Data Security Intelligence

• 보안의 새로운 패러다임 – Security Intelligence

Page 15: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅲ. Big Data Security Intelligence

• Security Intelligence Def.

Page 16: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅲ. Big Data Security Intelligence

• Multi-Src Monitoring for Security Intelligence

Page 17: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅳ. SIEM for Big Data

• Analysis Technology for Big Data (SIEM)

Page 18: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅳ. SIEM for Big Data

• 로그 데이터를 수집하는 이유

Page 19: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅳ. SIEM for Big Data

• 수집된 로그 활용의 어려운 점

Page 20: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅳ. SIEM for Big Data

• Big Data Platform & SIEM

Page 21: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅳ. SIEM for Big Data

• SIEM 발전 동향

Page 22: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ

Ⅴ. Ksign WizLook(Big Data Platform & SIEM)

Page 23: Big Data Security Intelligence & SIEMconcert.or.kr/suf2015/pdf/SUC-1.pdf · 2015-12-04 · Why Security Intelligence? Ⅲ. Big Data Security Intelligence Ⅳ. SIEM for Big Data Ⅴ