Unlock the power of Amazon VPC traffic mirroring
summary
Amazon VPC traffic mirroring enables agentless application-layer capture by streaming ENI traffic to monitoring instances or to ExtraHop Reveal(x) Cloud for real-time ML analysis, asset discovery, and threat detection. The talk claims 95% of cloud security issues sit outside admin control and 62% stem from misconfigurations ( cites Capital One ), shows an option to deploy AMIs inside the VPC, and demonstrates automatic security-group remediation to stop suspected data exfiltration as it happens.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:48Network analytics
- 2:24Security operations
- 3:58Security threats
- 6:32Network information
- 7:40Suck triad
- 9:25Network properties
- 12:57What does this mean
- 15:02Visibility
related talks
54mAssuring and securing AWS migrations
14mConfidence in cloud security: One step ahead of cyber threats
51mAdvanced approaches to traffic inspection & network diagnosis w/
47mNetwork operations management and governance
29mAmazon VPC design and new VPC capabilities
44mElevando la postura de seguridad con AWS Network Firewall
21mAWS On Air ft. Amazon Inspector
17mSimplify, optimize, and enhance AWS network management