secIT 2023 by Heise with great response for new approaches to SOC Services

Kiel - In live demos at the joint trade fair stand and presentations on the big stage, Consist and Tanium explained how pitfalls can be avoided when outsourcing security services and how all IT assets can be even better protected against targeted attacks or zero-day exploits through an innovative platform approach.

„Next Generation SOC“

At the exhibition stand screen, this approach was explained as follows: Through a combination of a UEM/UES platform (Unified Endpoint Management & Security) and a SIEM (Security Information and Event Management), the entire IT assets can be continuously secured proactively in a "Next Generation SOC". Even unmanaged assets, i.e. devices that are not even known to the IT department but operate in the company's network, are included in the protection.

Thanks to the ring-like linear chain topology combined with intelligent algorithms for load distribution and data deduplication, data of any kind can be collected and made available in a few seconds, even if there are more than a million endpoints. In contrast to the classic SOC, the SIEM does not only deliver events from a few predefined sources, but the NextGen SOC itself finds possible sources of information and delivers all available information to the SIEM in real time.

The importance of moving from a purely reactive to a proactive approach in real time is demonstrated by the fact that the number of ransomware attacks per year has increased by 50% since 2020. 81% of all successful attacks on companies were carried out via the endpoint. Web and mail are the preferred transport media for malware. "Endpoint - Biggest gateway for cyber attacks" - was therefore the topic of the presentation, selected by the editors of c't and iX, and part of the info programme on the big stage at this year's secIT. Together with its technology partner Tanium, Consist provided information about current threats and attack vectors, their detection and mitigation.