Paranoia-X - Gunter Ollmann "Convergence of SOC and NOC in a cloud-native world."

Описание: The fusion of AI and SIEM in the public cloud defines “cloud-native SIEM”. While it shares the SIEM label today, it continues to disrupt operational security in new ways as businesses undertake their digital transformation. Meanwhile the convergence of security operations and network operations is leading SOC and NOC to combine to SNOC for public cloud workloads.

Cloud-native SIEM’s transition to cloud-SOC is driving the convergence of security and network operations; leading to first-generation cloud SNOC. What are the barriers to machine intelligence and automation in elevating SNOC to the center of enterprise security decision making, and how will SecOps adapt?