The document discusses how FINRA uses Splunk Cloud to gain transparency and end-to-end visibility into its AWS environment. As an independent financial regulator handling large amounts of market data each day, FINRA needed a solution to gain comprehensive security visibility across its hybrid on-premises and AWS infrastructure. Splunk Cloud provides FINRA with the ability to correlate security data from AWS CloudTrail and other sources, both in the cloud and on-premises, helping FINRA to detect threats and reduce AWS costs by over 50% for some workloads.

1. Copyright © 2016 Splunk Inc.
Splunk your Cloud for a
better Security
Dominique Dessy, CISSP
Senior Sales Engineer

3. 3

4. FINRA
FINRA—the Financial Industry Regulatory Authority—is an independent, non-
governmental regulator for all securities firms doing business with the public in
the United States.
FINRA protects investors by regulating brokers and brokerage firms and by
monitoring trading on U.S. stock markets.
FINRA watches over 6 billion shares traded on the stock market each day
FINRA handles more ‘big data’ on a daily basis than the Library of Congress or
Visa—to build a holistic picture of the trading market
FINRA – Deter, Detect, Discipline
4

5. FINRA (before)
5
FINRA onPrem
Data Center
Location A
FINRA onPrem
Data Center
Location B
LOTS OF HARDWARE
DR REQUIRED CONFIG CHANGES
TRADIONAL SIEMs ONLY KNOW MESSAGES
THAT THEY KNOW ABOUT
SIEMs THINK ONLY SECURITY WILL NEED LOGS
CANNED ALERTS; MORE MARKETING THAN REALITY
LACK OF USER COMMUNITY KNOWLEDGE BASE

6. FINRA (Cloud)
6
On Prem A&B
FINRA VPCs

7. 7
Turning Machine Data Into Business Value
Index Untapped Data: Any Source, Type, Volume
Online
Services Web
Services
Servers
Security GPS
Location
Storage
Desktops
Networks
Packaged
Applications
Custom
ApplicationsMessaging
Telecoms
Online
Shopping
Cart
Web
Clickstreams
Databases
Energy
Meters
Call Detail
Records
Smartphones
and Devices
RFID
On-
Premises
Private
Cloud
Public
Cloud
Ask Any Question
Application Delivery
Security, Compliance
and Fraud
IT Operations
Business Analytics
Industrial Data and
the Internet of Things
Security, Compliance
and Fraud

8. 8
Splunk App for AWS
EC2
EMR
Kinesis
R53
VPC
ELB
S3
CloudFront
CloudTrail
CloudWatch
Redshift
SNS
API Gateway
Config
RDS
CF
IAM
Lambda
Explore Analyze Dashboard Alert Act
AWS Data Sources
Comprehensive AWS Visibility

9. 9
Complete Hybrid Visibility
Index Untapped Data: Any Source, Type, Volume
Online
Services Web
Services
Servers
Security GPS
Location
Storage
Desktops
Networks
Messaging
Telecoms
Online
Shopping
Cart
Web
Clickstreams
Databases
Energy
Meters
RFID
On-
Premises
Private
Cloud
Public
Cloud
End-to-End Visibility
Application Delivery
Security, Compliance,
and Fraud
IT Operations
Business Analytics
Industrial Data and
the Internet of Things
CloudTrail
Config
Lambda
EC2

10. Let’s see …
10

11. Comprehensive Security Visibility
Leveraging AWS CloudTrail
Correlating Data Across Hybrid Environment
Spanning AWS and On-Premises
Real-time AWS Cost Management
Reducing Spend on Select AWS Workloads by Over 50%
FINRA Uses Splunk Cloud for Transparency
and End-To-End Visibility in AWS

12. Thank you