Security Orchestration Automation and Response

lastmod 2021-11-05created 2021-11-053 edits

Security platform?

• Enterprise security is evolving into a platform
• The rise of SOAR : Security Orchestration, Automation and Response
  • A collection of security software solution tools that search and collect data from various sources
  • Analyzes diverse data using a combination of humans and machine learning to understand and prioritize incident response actions
• A concept that integrates the SIRP, SOA, and TIP platforms and chains their functions together
  • SIRP : security incident response platform
  • SOA : security orchestration and automation
  • TIP : threat intelligence platform
• Advantages of SOAR systems
  • Integrates process management, technology, and expertise
  • Centralizes asset monitoring
  • Enriches alerts with contextual intelligence
  • Response automation
• Market trends
  • Integration with other security technologies and services
  • Security service providers use SOAR to improve their own service quality and response capabilities
• SOAR platform/solution service providers
  • Splunk's Phantom
  • ServiceNow's Security Operations
  • RespondX
  • InsightConnect
  • IBM's Resilient

See also

• Security