Untitled Document
 Register Now & Save!
Untitled Document
2008 West Diamond Sponsor
Untitled Document
2008 West Platinum Sponsor
Untitled Document
2008 West Gold Sponsors
Untitled Document
2008 West Silver Sponsors
Untitled Document
2008 West Bronze Sponsors
Untitled Document
2008 West Exhibitors
Untitled Document
2008 West Media Sponsors
Untitled Document
2008 East Diamond Sponsor
Untitled Document
2008 East Platinum Sponsors
Untitled Document
2008 East Gold Sponsors
Untitled Document
2008 East Silver Sponsors
Untitled Document
2008 East Exhibitors
Untitled Document
2008 Media Sponsors
Latest News
In his session at 21st Cloud Expo, Carl J. Levine,...
"NetApp is known as a data management leader but w...
"We're focused on how to get some of the attribute...
Data scientists must access high-performance compu...
"CA has been doing a lot of things in the area of ...
Long-term partners Fujitsu Limited and Citrix Syst...
"WineSOFT is a software company making proxy serve...
As you move to the cloud, your network should be e...
In his session at 21st Cloud Expo, Michael Burley,...
22nd International Cloud Expo, taking place June 5...
Can't Miss RSS Feed
Subscribe to the RSS Feed & Get All The Conference News As It Happens!
Data Breach Handling | @DevOpsSummit #DataCenter #DevOps #InfoSec
A data breach could happen to anyone. Data managed by your company is valuable to someone, no matter what the data is

A data breach could happen to anyone. Data managed by your company is valuable to someone, no matter what the data is. Everything has a price tag on the dark web. It is especially true when it is customer data, such as personal and payment card details.

When your customers' data turns up somewhere unexpected on the Internet, you may feel the world is collapsing around you. People start tweeting about the hack, angry customers phone in, and Brian Krebs publishes his first article. Your organization switches to an emergency mode to handle the situation. It is the time when your incident response team takes control to put the genie back in the bottle.

More Attention on Data Breaches
The risk of data breaches should concern all decision makers by now. According to the latest report from Identity Theft Resource Center (ITRC), the total number of data breaches has increased this year compared to the figures from 2014. As the chances of having a breach increase, preparedness becomes more important than ever.

Furthermore, data breaches receive more media coverage, and customers become more concerned about the security of their personal data than ever. Target upset its shoppers with forcing them to replace their credit cards and to keep an eye on their credit reports. Customers of VTech were worried what happens with their kids' photos and personal details. TalkTalk subscribers wanted to abandon their contracts and called the CEO to step down.

Keeping the Customer Happy
When the unthinkable happens, your customers will demand answers. They all want to know how the breach would affect them, and what the company is going to do to prevent it from happening again.

If your organization can provide these answers and communicates things, chances your customers regain confidence in your brand is high. It never leaves a sour taste in your customers' mouth if the company demonstrates competence while handling the breach. Therefore, being prepared is good for the business.

Types of Data Breaches
The reason behind data breaches varies. According to Verizon and Mandiant, the top data breach reasons are human error, crimeware (or malware), insider misuse, physical theft and web attacks.

The majority of the media-covered breaches can be narrowed down to two variants, however: malware and web attacks.

Hackers got into Ashley Madison, Sony Pictures, and OPM through well-crafted malware such as backdoor software. On the other hand, customer data from VTech and TalkTalk was accessed by the notorious web attack named SQL injection.

Responding to the Breach
The different types of data breaches require different response strategies. The good news is, however, your incident response team can handle the same type of breach in a somewhat formalized manner.

For instance, your incident response team would probably respond to malware associated data breaches as the following:

  1. Identify the source (i.e. information system) of the data leak
  2. Investigate how the information system was compromised
  3. Generate indicators of compromise (IoC) from the malware
  4. Find other infected systems on your network with the IoCs
  5. Clean-up each identified system from the malware
  6. Monitor for potential new infections using the IoCs

The incident response team also queries internal tools (SIEM), external services (Threat Intelligence feeds), and engages internal staff such as IT to collect information for the investigation. Having the necessities in order, along with playbooks and automation could all make the overall response process smooth and consistent.

Legal and PR Matters
In parallel, the incident response team would determine the scope of the data breach. There are two questions need to be answered: how long the data breach has been going on and what data was affected.

The answers typically serve as an input for your legal and PR teams:

  • Legal team: Your company may have legal obligations to do certain things, such as reporting the data breach to the privacy officer or notifying your customers. These obligations depend on the nature of the data that is involved.
  • PR team: Press releases, interviews, and responses to customer queries on social media are things the PR team handles during a breach. To make sure crisis communication is right, they also need input from the incident response team.

Central Hub of Information
Because the incident response team coordinates the remediation efforts across the organization, they also serve as a central hub for information. Firstly, the team collects information that sets the general direction of the remediation process. Secondly, the incident response team shares information with others such as your legal and PR teams.

As the incident response team collects, processes, and shares a large amount of information, it is a wise decision to invest in an information sharing platform. It eases the information flow between all parties during the investigation process. Besides, the accumulated data could be invaluable for handling future breaches.

Summary
The total number of data breaches and the records affected is still on the rise. At the same time, the media provides a wider coverage of these events. As a consequence, customers are more concerned with the security of their private data than ever.

Your organization should respond to this challenge by preparing for the inevitable. The solution is well-prepared incident response team, which could manage the situation in a competent manner.

Playbooks should be prepared and practiced that covers the most frequent types of data breach scenarios. Good incident coordination depends on information gathering, processing, and sharing. Well-informed PR and legal teams could build an effective crisis communication strategy to regain customer trust.

About Rishi Bhargava
Rishi Bhargava is Co-founder and VP, Marketing for Demisto, a cyber security startup with the mission to make security operations - “faster, leaner and smarter.” Prior to founding Demisto, he was Vice President and General Manager of the Software Defined Datacenter Group at Intel Security. A visionary and technology enthusiast, he was responsible for delivering Intel integrated Security Solutions for datacenters.

Before Intel, he was Vice President of Product Management for Datacenter and Server security products at McAfee, now part of Intel Security. As an intrapreneur at McAfee, he launched multiple products to establish McAfee leadership in risk & compliance, virtualization, and cloud security. He joined McAfee by way of acquisition in 2009 (Solidcore, Enterprise Security Startup). At Solidcore, he was responsible for Product Management and Strategy. As one of the early employees and member of the leadership team, he was instrumental in defining the company's product strategy and growing the business.

Rishi has over a dozen patents in the area of Computer Security. He holds a BS in Computer Science from Indian Institute of Technology, New Delhi and a Masters in Computer Science from University of Southern California, Los Angeles. He is passionate about new technologies and industry trends and serves as an active advisor to multiple startups in silicon valley and India.

In order to post a comment you need to be registered and logged in.

Register | Sign-in

Reader Feedback: Page 1 of 1

Untitled Document

Call 201 802-3020 or Click Here to Save $100!

Save $100

 Sponsorship Opportunities

Virtualization Conference & Expo, California and London is the leading event in its third year covering the booming market of Virtualization for the enterprise. Now featuring Cloud Computing Expo, this leading event will surely deliver the #1 i-technology educational and networking opportunity of the year for leading Virtualization technology providers.



Who Should Attend?

Senior Technologists including CIOs, CTOs, VPs of technology, IT directors and managers, network and storage managers, network engineers, enterprise architects, communications and networking specialists, directors of infrastructure Business Executives including CEOs, CMOs, CIOs, presidents, VPs, directors, business development; product and purchasing managers.

Cloud Computing Bootcamp

Introducing at Cloud Computing Expo 2008 West the world's first-ever full one-day, immersive "Cloud Computing Bootcamp" - led by developer-entrepreneur Alan Williamson, Founder of Blog-City.com and creator of the OpenBlueDragon CFML runtime engine.

View the full one-day schedule

Video Coverage of Virtualization Conference
on SYS-CON.TV

David Greschler: Virtualization Beyond the Datacenter to the Desktop
Miko Matsumura: Time Oriented Architecture: Evolution by Design?
Brian Stevens: The Future of the Virtual Enterprise
Kevin Brown: Leveraging Desktop Virtualization for Security, Manageability and Usability Beyond the Perimeter

Video Coverage of the Virtualization Power Panel 2007

Virtualization Power Panel 2007 with Gordon Jackson, David Christian, Ken Jisser and Ben Rudolf

 Conference Media Sponsor: Cloud Computing Journal

Cloud Computing Journal aims to help open the eyes of Enterprise IT professionals to the economics and strategies that utility/cloud computing provides. Cloud computing - the provision of scalable IT resources as a service, using Internet technologies - potentially impacts every aspect of how IT deploys and operates software.

Cloud Computing Expo 2008 Speakers Include...


VOGELS
Amazon


FEINBERG
EMC


WELTMAN
Yahoo

NICKOLOV
3Tera

HAAR
Appistry

ZHOU
Platform Computing

HERROD
VMware

KEAGY
GoGrid

KRISHNAN
ParaScale

COHEN
Enomaly

EATON
Cloudworks

BRYCE
Mosso

SHALOM
GigaSpaces

SOMAL
VMware

CHU
VMware

THORSTEN VON EICKEN
RightScale



SYS-CON EVENTS


Past Events Archive

SOAWorld Conference & Expo 2008 East
soa2008east.sys-con.com
Virtualization Conference & Expo 2008 East
virt2008east.sys-con.com
AJAXWorld 2008 Conference & Expo East
ajaxmar08.sys-con.com
SOAWorld Conference & Expo 2007 West
www.soaworld2007.com
Virtualization Conference & Expo 2007 West
virt2007west.sys-con.com
AJAXWorld 2007 Conference & Expo West
ajaxoct07.sys-con.com
SOAWorld Conference & Expo 2007 East
soa2007east.sys-con.com
Virtualization Conference & Expo 2007 East
virt2007east.sys-con.com
AJAXWorld 2007 Conference & Expo East
ajaxmarch07.sys-con.com
Other SYS-CON Events
events.sys-con.com

SOAWorld & Conference Alumni Delegates Represents...

• AccuRev
• Adea Solutions
• Adobe Systems, Inc [3 delegates]
• ADP
• Aeropostale, Inc
• Aetna
• Akbank Training Center
• American Family Insurance
• American International College
• American Modern Insurance
• Amphion Innovations
• Amplify LLC, Clipmarks [2 delegates]
• Anderson Consulting
• Arrow Electronics [3 delegates]
• Ashcroft Inc
• Athabasca University
• ATS
• Audatex
• Avanade, Inc.
• Avaya Inc. [5 delegates]
• Azul [2 delegates]
• Backbase [2 delegates]
• Bank of America
• Bank of NY
• Barnes and Noble
• Barnex Investment International Limited
• BEA
• Bear Stearns [2 delegates]
• Bendel Newspaper Company Limited
• BizInnovative
• Bloomberg [2 delegates]
• BlueBrick Inc.
• BMC Software
• Boeing
• Bottomline Technologies [2 delegates]
• BP
• Broadcom

   read more...
Cloud Computing Blogs
In other words, VMware’s server density is higher. Boles suggests this means that customers should be “assessing virtualisation on a ‘cost per application’ basis. VM density has a sign
Traditionally, the way people have implemented high availability is by using a high-availability management package like Linux-HA[1], then configure it in detail for each application, file system moun