Watch the webinar: http://bit.ly/1QUAWBL What if there was a way that you could fortify your security strategy to make catching potential threats easier, more affordable and more efficient? Great news – there is! Automation can be leveraged as a force multiplier for your CSIRT (Computer Security Incident Response Team), making your data, and your organization, much safer from would-be criminals. And while no plan can ever fully eliminate risk, the more you proactively strengthen your approach, the more you can mitigate any potential damages. This informative presentation will delve in-depth into a number of helpful topics, including several compelling reasons why you should automate cyber security incident response as well as how to deal with several concerns associated with automated incident response. Download eyeShare, free of charge - http://bit.ly/1XegGQR

1. © 2016 Ayehu Software Technologies, Ltd. All rights reserved.
How to Turbocharge Your
Cyber Security Incident Response
With Automation
February 24, 2016
starting at
12:00pm EST / 9:00am PST

2. Today’s webinar will be presented by:
Guy Nadivi
Director, Business Development
© 2016 Ayehu Software Technologies, Ltd. All rights reserved. slide 2
Sharon Cohen, CISM
IT & Security Professional
Services Manager

3. Company Background
• Leading innovator of IT Process Automation Software
• Founded in 2007, Headquarters in New York
• Product first launched in 2009
• Flagship product: eyeShare™ IT Process Automation v4.7.3
• Eric Benhamou, former CEO of 3Com and Palm, BGV currently
© 2016 Ayehu Software Technologies, Ltd. All rights reserved.

4. Sample of eyeShare Users
© 2016 Ayehu Software Technologies, Ltd. All rights reserved.

5. Agenda
slide 5© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
#1
Why you
should
automate
Cyber Security
Incident
Response
#2
The concerns
of running
automation in
Cyber Security
Incident
Response
#3
A real life
scenario of
automating
Incident
Response

6. What Is A Cyber Security Incident Response?
slide 6© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
An organized approach to addressing and
managing the aftermath of a security breach or
attack (also known as an incident).
The goal is to handle the situation in a way that
limits damage and reduces recovery time and
costs.
source: searchsecurity.techtarget.com/definition/incident-response
An organized approach to addressing and
managing the aftermath of a security breach or
attack (also known as an incident).
The goal is to handle the situation in a way that
limits damage and reduces recovery time and
costs.

7. What Is A Cyber Security Incident Response?
slide 7© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
source: Gartner - "Top Security Trends for 2016-2017"

8. Why Automate Cyber Security Incident Response?
slide 8© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
“71% of represented organizations experienced at least one successful
cyberattack in the preceding 12 months (up from 62% the year prior)”.
source: 2015 Cyberthreat Defense Report from the CyberEdge Group
205 - median number of days that threat groups were present on a victim’s
network before detection (Longest Presence: 2,287 days)
source: "Beyond the Breach" - Mandiant 2015 Malware Report
Malicious cyber attacks cost US$300 Billion to US$1 Trillion a year!
source: "THE ECONOMIC IMPACT OF CYBERCRIME AND CYBER ESPIONAGE Report" -
Center for Strategic and International Studies July 2013

9. Why Automate Cyber Security Incident Response?
slide 9© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
“By 2019, 40% of large enterprises will require specialized,
automated tools to meet regulatory obligations in the
event of a serious information security incident.”
source: Gartner

10. Why Automate Cyber Security Incident Response?
slide 10© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
Lack of qualified staff Lack of necessary expertise
People don’t scale very well

11. Why Automate Cyber Security Incident Response?
slide 11© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
When it comes to remediating security breaches,
automation is a force multiplier

12. Concerns About Automating Cyber Security Incident Response
slide 12© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
Too Many False Positives In Security

13. Concerns About Automating Cyber Security Incident Response
slide 13© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
In Security (& elsewhere) False Positives Are Distressing

14. Automating Cyber Security Incident Response
slide 14© 2016 Ayehu Software Technologies, Ltd. All rights reserved.

15. Automating Cyber Security Incident Response
slide 15© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
A security playbook is a customizable template for specific cyber security
incidents, that streamlines an organization's response procedures using best
practices.
Playbook

16. Ayehu Case Study
slide 16© 2016 Ayehu Software Technologies, Ltd. All rights reserved.
Dual Logins By The Same Individual From Different Locations
• A user logs in from one location.
• The same user then logs in 15 minutes later from another
location 30 miles away.
• Is the first login legitimate, but the second one fraudulent? Or
is it the other way around? Maybe they’re both fraudulent?
• How do you automate the process of determining which login
(if any) is legitimate?

17. Sharon Cohen
© 2016 Ayehu Software Technologies, Ltd. All rights reserved. slide 17

18. Demo
slide 18© 2016 Ayehu Software Technologies, Ltd. All rights reserved.

19. Top 3 Features
© 2016 Ayehu Software Technologies, Ltd. All rights reserved. slide 19
No
Programming !

20. Top 3 Features
© 2016 Ayehu Software Technologies, Ltd. All rights reserved. slide 20
No Agents !

21. Top 3 Features
© 2016 Ayehu Software Technologies, Ltd. All rights reserved. slide 21

22. Top 3 Benefits
© 2016 Ayehu Software Technologies, Ltd. All rights reserved. slide 22
Automation enables better preparation
• Simulate & test multiple scenarios in
advance of an attack
• Validates playbooks
• Fast response, errors reduced,
documented properly, people notified

23. Top 3 Benefits
© 2016 Ayehu Software Technologies, Ltd. All rights reserved. slide 23
Automation enables 24/7 Coverage
• SOC's are rarely manned around the
clock with security experts
• Enables fast, best practice responses no
matter who’s on duty any time of day

24. Top 3 Benefits
© 2016 Ayehu Software Technologies, Ltd. All rights reserved. slide 24
Rapid Containment, Eradication, & Recovery
• Malware
• Evidence
• Vulnerabilities
• Operational

25. Ask Us Anything
slide 25© 2016 Ayehu Software Technologies, Ltd. All rights reserved.

26. Please send any follow up questions to:
Guy Nadivi
guy@ayehu.com
www.ayehu.com
slide 26
Go To ayehu.com
Free trial version
of eyeShare!
© 2016 Ayehu Software Technologies, Ltd. All rights reserved.