Enhance Security Resilience Through Splunk User Behavior Analytics VPN Models | Splunk
The COVID-19 pandemic has spurred a significant increase in the adoption of remote access, resulting in a substantial portion of the workforce transitioning to remote work. This requires employees to heavily rely on their employer’s virtual private network (VPN) to connect to their company's IT systems. This shift to working from home (WFH) is expected to continue well into the foreseeable future. Furthermore, employees now commonly work remotely from various locations, such as coffee shops, hotels, airports, in addition to their own homes and company offices. The diversity of this remote workforce presents a challenge when it comes to monitoring VPN activities. At the same time, the heightened volume of VPN use has brought security threat events into closer proximity with VPN sessions, offering an opportunity to leverage VPN connection data for the detection of potential security threats. As a result, the security of VPN logins has become a significant concern, leading Security Operat
Enhance Security Resilience Through Splunk User Behavior Analytics VPN Models | Splunk Enhance Security Resilience Through Splunk User Behavior Analytics VPN Models Security November 07, 2023 Xiao Lin The COVID-19 pandemic has spurred a significant increase in the adoption of remote access, resulting in a substantial portion of the workforce transitioning to remote work. This requires employees to heavily rely on their employer’s virtual private network (VPN) to connect to their company's IT systems. This shift to working from home (WFH) is expected to continue well into the foreseeable future
related reading
- Elevating Security Intelligence with Splunk UBA's Machine Learning Models | Splunksplunk.com
- Building At-Scale User Behavior Analytics for Splunk UBA: Enhance Performance of Account & Device Exfiltration Models | Splunksplunk.com
- UEBA Superpowers: Enhance Security Visibility with Rich Insights to Take Rapid Action Against Threats | Splunksplunk.com
- Risk-Based Alerting: The New Frontier for SIEM | Splunksplunk.com
- Building Large-Scale User Behavior Analytics: Data Validation and Model Monitoring | Splunksplunk.com
- Anomalies detected by the Microsoft Sentinel machine learning engine | Microsoft Learnlearn.microsoft.com
- A Deep Dive Into The Cloud & Application Security Ecosystemsoftwareanalyst.substack.com
- Defining A Software Supply Chain Security Platform & Exploring New Techniques, Part 2softwareanalyst.substack.com
- UEBA Superpowers: Simplify Incident Investigations to Increase SOC Efficiency | Splunksplunk.com
- Unsupervised Machine Learning with Splunk: the cluster command | by Alex Teixeira | Detect FYIdetect.fyi
- Baseline Hunting with the PEAK Framework | Splunksplunk.com
- The Splunk Effectomeronsecurity.com