{"id":20651,"date":"2022-12-02T21:46:05","date_gmt":"2022-12-02T21:46:05","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/02\/amazon-security-lake-tackles-seamless-analytics-with-the-help-of-the-open-cybersecurity-schema-framework\/"},"modified":"2022-12-02T21:46:05","modified_gmt":"2022-12-02T21:46:05","slug":"amazon-security-lake-tackles-seamless-analytics-with-the-help-of-the-open-cybersecurity-schema-framework","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/02\/amazon-security-lake-tackles-seamless-analytics-with-the-help-of-the-open-cybersecurity-schema-framework\/","title":{"rendered":"Amazon Security Lake tackles seamless analytics with the help of the Open Cybersecurity Schema Framework"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Since data is part of security, centralizing it makes access control and anomaly detection easier.<\/p>\n

Through an open-source project, dubbed Open Cybersecurity Schema Framework, Amazon Security Lake enables development of a common language around security data for enhanced analytics, according to Mark Terenzoni<\/a> (pictured), director of Amazon Detective and Amazon Inspector at Amazon Web Services Inc.<\/p>\n

\u201cIt\u2019s a communal lake where customers\u00a0can bring all of their security data in one place,\u00a0whether it\u2019s generated in AWS, their on-prem,\u00a0or SaaS offerings or other clouds, all in one location\u00a0in a language that allows analytics and give better outcomes\u00a0for our customers,\u201d\u00a0Terenzoni said. \u201cWe have 60 vendors participating in developing that language\u00a0and partnering within Security Lake \u2026 we\u2019ve made it simple to aggregate this data\u00a0in a single place.\u201d<\/p>\n

Terenzoni spoke with theCUBE industry analysts John Furrier<\/a> and Savannah Peterson<\/a>\u00a0at\u00a0AWS re:Invent<\/a>, during an exclusive broadcast on theCUBE, SiliconANGLE Media\u2019s livestreaming studio. They discussed how Amazon Security Lake seeks to be a game-changer in the security analytics space.\u00a0(* Disclosure below.)<\/em><\/p>\n

Taking security a notch higher<\/h3>\n

Not only does AWS provide Amazon Security Lake for anomaly detection, but also Amazon GuardDuty and Amazon Inspector. This enables users to analyze risks within their container workload, according to Terenzoni.<\/p>\n

\u201cGuardDuty for EKS runtime; it\u2019s complimenting our existing capabilities\u00a0for EKS support,\u201d he explained.\u00a0\u201cSo, today, Inspector does vulnerability assessment on EKS\u00a0or container images in general.\u00a0GuardDuty does detections of EKS workloads\u00a0based on log data.\u00a0Detective does investigation and analysis\u00a0based on that log data as well.\u201d<\/p>\n

Through an industry open standard that reduces the complexity of transforming logs to perform security analytics, Terenzoni believes Amazon Security Lake is a game-changer that enables users to build a security data lake.<\/p>\n

\u201cThe unique value in the data lake\u00a0is that we put the information in the customer\u2019s control; it\u2019s in their S3 bucket. They get to decide who gets access to it,\u201d he noted. \u201cWith Security Data Lake, they get the best of both worlds.\u00a0We run the infrastructure at scale for them,\u00a0put the data in their control ,and they get to decide what use case, partner and tool gives them the most value on top of their data.\u201d<\/p>\n

Here\u2019s the complete video interview, part of SiliconANGLE\u2019s and theCUBE\u2019s coverage of\u00a0AWS re:Invent<\/a>:<\/p>\n