IoT Show: Agentless IoT/OT Security with Azure Defender for IoT

Описание: Azure Defender for IoT (https://aka.ms/iotshow/AzureDefenderF...) is an agentless security solution for Operational Technology (OT) networks incorporating specialized IoT/OT-aware behavioral analytics from Microsoft’s recent acquisition of CyberX. The new solution enables industrial and critical infrastructure organizations to secure their existing or brownfield devices without any performance impact or changes to existing environments. It’s also deeply integrated with Azure Sentinel and supports 3rd-party tools such as Splunk, IBM QRadar, and ServiceNow. Combined with previous support in Azure Security Center for IoT for protecting managed (or greenfield) IoT/OT devices connected via Azure IoT Hub, these new capabilities enable organizations to accelerate their digital transformation initiatives with a combined solution for both unmanaged (or brownfield) devices and managed (or greenfield) devices. In this segment, we’ll describe the architecture of the solution and show how it can be used to protect against real-world attacks, using the TRITON attack on a petrochemical facility as an example.

Learn more about Azure Defender for IoT at https://aka.ms/iotshow/AzureDefenderF...

00:00 Teaser
00:30 Introduction
01:38 What is OT security
03:26 Cyberattacks examples on IoT solutions
11:25 Recommendations for securing an IoT solution E2E
13:50 Azure Defender for IoT offer
18:52 Examples of real-time IoT/OT threats alerts monitored by Defender
21:49 Wrap up and call to action