Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

5 user behavioral patterns to look out for in a decentralized workspace

Problem: If there are thousands of employees scattered around hundreds of places, how do you keep your organization’s network safe? Solution: You should monitor your employees wherever they’re located, and devise a standard baseline of their behavior through machine learning techniques. By using that information, you can identify anomalies and protect your network from cyberattacks.

Container security on IBM Cloud

If you’re running containers and Kubernetes on IBM Cloud, you can now enable the key security workflows of Sysdig Secure as a service within your IBM Cloud deployments. This makes it easier for you to implement security tools and policies to ensure your containers and your Kubernetes environment are protected and running as intended. The new container and Kubernetes security features are integrated into IBM Cloud Monitoring with Sysdig and offered as an additional service plan.

Kubernetes network policies with Sysdig

Microservices and Kubernetes have completely changed the way we reason about network security. Luckily, Kubernetes network security policies (KNP) are a native mechanism to address this issue at the correct level of abstraction. Implementing a network policy is challenging, as developers and ops need to work together to define proper rules. However, the best approach is to adopt a zero trust framework for network security using Kubernetes native controls.

Finding Zen - How IT Ops and IT Security Can Work Together

It's no secret IT Ops and Security teams don't have the most glowing relationship. The simplistic reason is while Ops is responsible for making work and communication as seamless and accessible as possible (and therefore wants everything open), Security is focused on making it as difficult as possible for the wrong people to get inside (and therefore wants everything closed). But beyond the trite hot takes, fundamentally, both teams want to keep the bad guys out without stifling productivity. And when these two groups work together—Well, it’s magic. Timothy Brown, SolarWinds VP of Security, is here to tell you how to reduce friction with some advice and real-world examples.

Shipping Sysmon Logs to Logz.io Cloud SIEM

System Monitor (Sysmon) is Windows’ service for monitoring activity and recording it to the Windows event log. It is the go-to for logging anything on a PC. Sysmon will immediately log events, capturing vital info. The driver for Sysmon will install as a boot-start driver, enabling capture of any and all events from the get-go. Now, you can send Sysmon logs straight to Logz.io Cloud SIEM.

Troubleshooting Kubernetes Networking with Calico

Troubleshooting connectivity problems in distributed networks is difficult enough, but doing it in a Kubernetes environment is even more challenging. However, there are tools in Calico that can ease the burden and speed problem resolution. Join this session that discusses the components that makeup Calico and best practices for troubleshooting connectivity problems in your Kubernetes cluster when things go wrong.

The Technology Companies Think They Can Live Without (and Why They're Wrong)

When the value is obvious, most companies are willing to invest in tools to help employees get their job done better. But over the course of my career, I’ve noticed a few blind spots companies can’t seem to remember when writing out their tech team grocery list. These include things obvious to many, like training, antivirus for all devices, and comprehensive content management; or the more subtle ones like password managers or (yes) monitoring.