Fluency Introduction Deck - October, 23, 2017
1 like123 views
1. Fluency reduces the need for 24/7 security monitoring staff through automated correlation, machine learning, and risk scoring which improves efficiency and accuracy. 2. Fluency performs first and second level orchestration using its patented correlation and risk scoring technologies. 3. Fluency's automated correlation and risk scoring provides a single view of user and device insights related to security events.
Fluency Introduction Deck - October, 23, 2017
- 1. 1 Correlation & Orchestration Proven Security Analytics for Unmatched Efficiency
- 2. Scaling Talent 2 A company’s greatest resource is its people • It takes six (6) people to monitor a desk 7x24. • The most underqualified security people fill these slots. • Most companies outsource due to the expense. • Scaling talent is the best means to maintain quality and reduce costs.
- 3. FluencyCorpproprietary Fluency 3 • Fluency reduces the need to staff 7x24 security monitoring, by leveraging automated correlation and machine learning into single view scoring. • Fluency offers 1st and 2nd tier orchestration using its patented correlation and risk scoring that increases efficiency and accuracy. Automated Correlation/Risk Scoring = Efficiency
- 4. FluencyCorpproprietary How Fluency Works 4 Scoring of Correlated Data
- 5. FluencyCorpproprietary Risk Scoring 5 Performs Validation 7x24 for every system Fluency uses supporting vectors What does that mean? When an analyst validates an alert they look at the time period around the event and determine if there are supporting factors, giving more weight to factors that are from different sources. Fluency does the same in machine learning.
- 6. FluencyCorpproprietary Better than a Human – YES, every time 6 Results match that of top rated analysts Fluency consistently matches the results of MTA analysis. Unlike a human, Fluency is 7x24 and focused on every system as if it was the only system.
- 7. FluencyCorpproprietary Notification 7 Knowing where to start Notification events are JSON objects that can be sent or listed. The notification page allows an overview of system messages along with a summary and link to its details.
- 9. FluencyCorpproprietary Single View 9 User and device insight to events
- 10. FluencyCorpproprietary Technology 10 Proprietary code designed to run in-memory • U.S. patent for real time correlation based of flow characteristics • Beginning process of a second patent on orchestrated threat scoring • Proprietary graph database
- 12. FluencyCorpproprietary Delivery • Subscription based model (12 month minimum commit) • Investment based on bandwidth of access points & a fee for total EPS • Able to provide CAPEX or OPEX proposals depending on customer need • Flexibility and willingness to meet customer needs 12
- 13. FluencyCorpproprietary Use Case: 10 Gbps Entry 8,000,000,000 flow events per day • DDoS EPS spikes • Large scans • 1,600,000 nodes with 600 subnets • IPv6 13 • Compared 3 major detection products • FireEye/Blue Coat/Fidelis • Integration from alert to payload (Blue Coat Solera) • Flow analysis
- 14. FluencyCorpproprietary How Tough is 10g 14 488,000 EPS Fluency was the only security device to maintain operations during a 488,000 EPS DDoS attack.
- 15. FluencyCorpproprietary Use Case: Finding Impacted User • Previously, 45 minutes to determine user from an event • Policy insight into remote login (LogMeIn/TeamViewer) • Determination of events not blocked From issue-to-user in one click • Four diverse ingress/egress points converted to a single view • Cisco firewalls and WebSense • No integration with IT
- 16. Recognition
- 17. 17