2019 = $124 billion

2022 = $170.4 billion

Growing 12-15% YoY

Security Operations Centers

1/1000 companies have a SOC

Average Cost of a SOC is $2.5M (CapEx)

Scaling depends on availble physical office space

(52% of Fortune 500 have a SOC)

Who works in the Security Operations Center?

1. 1. Security  Analyst
2.  
3. 2. Security Engineer
4.  
5. 3. Security Manager
6.  
7. 4. Chief Information Security Officer

Roles in SOC

Text

 Security  Analyst

(FrontLine Soldiers)

Security analysts are typically the first responders to incidents. They are the soldiers on the front lines fighting against cyber attacks and analyzing threats.

Text

 Security  Engineers

(Engineers & Architects)

Security engineers are responsible for maintaining tools, recommending new tools, and updating systems

Work with development operations teams to ensure that systems are up to date

 Security  Manager

(The Boss)

A security manager is responsible for overseeing operations as a whole. They are in charge of managing team members and coordinating with security engineers.

They serve as the direct boss to all members of the SOC team.

CISO

(The Executive)

The chief information security officer (CISO) is responsible for defining and outlining the organization’s security operations.

Typically, a CISO reports directly to the CEO and has direct contact with all of upper management.

Current Tools being used in a SOC

1)

2)

3)

Internet of things (IoT)

The internet of things, or IoT, is a system of interrelated computing devices, mechanical and digital machines, objects, animals or people that are provided with unique identifiers (UIDs) and the ability to transfer data over a network without requiring human-to-human or human-to-computer interaction.

Virtual Command 3D

• Building schematics
• Weather conditions
• Live video feeds
• Data analytics
• Maps
• Fast Communication
• Multiplatform support

3Data Operations Center

June 10th 2019

3Data Analytics

Virtual Command

• 3D Graph showing real-time network traffic flow
   
• Machine Learning that scores potential threats based on Anomaly

• ​Drill down to further inspect

• Easy and Fast to communicate remotely

Meet Apollo

Your AI Security Assistant 

Virtual assistant which uses voice response technology to better manage network and cybersecurity events

Codename: Apollo

Prediction, Prevention,  Detection, Response, Monitoring.

Machine learning for Network Protection

Machine learning for User Behavior

Machine learning for Object Detection

• Regression to predict the network packet parameters and compare them with the normal ones; (Historical data Analysis)
•  
• Classification to identify different classes of network attacks such as scanning and spoofing;
•  
• Clustering for forensic analysis.

ML for Network Protection

• Regression to detect anomalies in User actions (e.g., login in unusual time);
•  
• Classification to group different users for peer-group analysis;
•  
• Clustering to separate groups of users and detect outliers.
•  
•  

Machine learning for User Behavior

• Object detection is the process of finding instances of objects in images
•  
• Object detection is a subset of object recognition, where the object is not only identified but also located in an image

Machine learning for Object Recognition

Run correlations across the physical and the Digital

Go to Market

Apollo Engine
 

Cisco Meraki Example

Integrate with Additional Vendors