利用 AWS 安全事件响应服务扩展安全运营.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.S E C 3 2 9Scale Security Operations with AWS Security Incident Response ServiceMignona CotCISO,InforHart RossmanVP,AWS SecurityLindsey HenryHead of AWS Customer Inc

2、ident Response 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.AgendaIntroductionAbout InforChallengesSolution and journeyDemonstration,benefits and enhancementsWhats next and lessons learned4Copyright 2025.Infor.All Rights R4Copyright 2025.Infor.All Rights RCopyright 2025.Infor.A

3、ll Rights RCopyright 2025.Infor.All Rights RFashionAerospace&DefenseAutomotiveFood&BeverageDistributionHealthcareIndustrial ManufacturingPublic Sector2,000+microverticalsDeveloped for your industry,not bent to fit itNatively Natively built onbuilt onIndustry Agentic Process Project Agents,Task Agent

4、s,Supervisor AgentsIndustry Role-based WorkspacesGenAI Assistant 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.S T R E A M L I N E D I N C I D E N T R E S P O N S E F O R F A S T E R R E C O V E R YChallenges in Security OperationsCoordinated and scalable incident responseAll-da

5、y access to security experts and self-investigative toolsAutomated monitoring and investigation 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Proactive security responseAmazon GuardDutyDetect threats and anomalous behavior IngestTriageInvestigate EscalateCustomer metadataIP addr

6、esses,AWS Identity and Access Management(IAM)principalsService intelligenceValidate and confirm findingsFined-tuned alertsFocus and prioritize resourcesResponder verification With customer permissions,scan environments to validate true positivesAWS Security HubIntegration via 3rd party security tool