下载PDF
实例探究 > Securing the Infrastructure So People Can Go Skiing

Securing the Infrastructure So People Can Go Skiing

技术
  • 网络安全和隐私 - 端点安全
  • 网络安全和隐私 - 网络安全
  • 网络安全和隐私 - 安全合规
适用功能
  • 商业运营
  • 设施管理
用例
  • 入侵检测系统
  • 远程资产管理
服务
  • 系统集成
  • 培训
挑战
ORDA faced significant challenges in ensuring the security of its IT infrastructure, especially after acquiring a third ski resort in 2012. The organization needed to comply with PCI standards due to changes in how they handled credit cards. Additionally, the seasonal nature of their business required special security training for new and existing employees. The IT department, consisting of only eight members with a single dedicated security officer, had to manage user awareness, security training, and monitor for anomalies and indicators of compromise. The primary concerns included potential credit card data breaches and malware infections.
关于客户
The New York State Olympic Regional Development Authority (ORDA) is a state authority established after the 1980 Olympics to manage two ski resorts and several Olympic sites. These facilities are used for public recreation and world-class sporting competitions. ORDA is headquartered in Lake Placid, NY, and employs a seasonal workforce, especially in the fall. The organization has an eight-member IT department, with one dedicated Information Security officer responsible for user awareness, security training, and monitoring for security threats. ORDA's mission is to provide secure and enjoyable recreational facilities while maintaining compliance with security standards.
解决方案
To address their security challenges, ORDA conducted a competitive comparison of various log management tools, including AlienVault, LogRythm, Splunk, HP ArcSight, and Solarwinds Log and Event Manager. They chose AlienVault Unified Security Management (USM) for its comprehensive features and cost-effectiveness. The implementation began in the fall of 2012, starting with OSSEC host intrusion detection to monitor Active Directory changes, privileged account use, and group membership changes. This allowed for detailed tracking of administrative actions and potential suspicious behavior. Additionally, AlienVault's Network Intrusion Detection System (IDS), using Snort and Suricata, was deployed to detect exploited vulnerabilities and indicators of compromise through packet sniffing. The behavioral monitoring capability with Netflow was also utilized on two of ORDA's four remote sensors. The Open Threat Exchange (OTX) feature proved valuable for investigating potential incidents and indicators of compromise.
运营影响
  • The implementation of AlienVault USM allowed ORDA to enhance its security posture significantly.
  • OSSEC host intrusion detection provided detailed monitoring of Active Directory changes, helping to identify suspicious behavior.
  • The Network Intrusion Detection System (IDS) using Snort and Suricata enabled the detection of exploited vulnerabilities and indicators of compromise.
数量效益
  • Implemented AlienVault USM in 2012, enhancing security capabilities.
  • Expanded Network Intrusion Detection System (IDS) deployment to all locations by spring.

相关案例.

联系我们

欢迎与我们交流!

* Required
* Required
* Required
* Invalid email address
提交此表单,即表示您同意 IoT ONE 可以与您联系并分享洞察和营销信息。
不,谢谢,我不想收到来自 IoT ONE 的任何营销电子邮件。
提交

Thank you for your message!
We will contact you soon.