Blade Logic

BladeLogic 8.
7:
SecOps Demo
—
Mitchell Sherfey
Principal Product Manager – Data Center Automation
mitchell_sherfey@bmc.com
© Copyright 2014 BMC Software, Inc. 1
175,492,082
Records Reported Breached so far in 2015
$5.3 Million
71,9
Average Cost of Data Breach (Up 15%)
51
Total Count of CVEs (October 8, 2015)
© Copyright 2014 BMC Software, Inc. Source: NOPSEC 2015 State of Vulnerability Risk Management 2
So Why Do Breaches Still Happen?
43%
Coverage – you can’t
patch what you don’t
know
of companies have Downtime – hard to
had a data breech schedule maintenance
times with users
Complexity –
dependencies make it
hard to isolate actions
Most Breaches Exploit Known Vulnerabilities
80% 99.9%
ATTACKS FIX READY

More than 80% of attacks 99.9% of exploits were
target known vulnerabilities compromised over a year
© Copyright 2014 BMC Software, Inc. after the CVE was published 4
© Copyright 2014 BMC Software, Inc. The Security Operations (SecOps) Gap 5
Vulnerability Scan Reports
 1000+ page reports
 Difficult to action
 No linkages into remediation
 Audit trails are a series of screen shots
 Not tied to Change Management

SecOps Workflow
VULNERABILITIES
VULNERABILITIES REPORT
REPORT COMPLIANCE
COMPLIANCE
SECURITY DISCOVERED
DISCOVERED
WITH
WITHSCANS
SCANS
CREATED
CREATED
SENT
SENTTO
TOOPS
OPS
EXTRA
EXTRACHANGE
CHANGE
DOCUMENTATION
DOCUMENTATION
VERIFIED
VERIFIED
COMPLIANCE
COMPLIANCE
REPORTING
REPORTING
OPS
OPSDIGESTS
DIGESTS REMEDIATION
REMEDIATION
OPS
REPORT
REPORTAND
AND CHANGE
CHANGETICKET
TICKET CAB
CABAPROVAL
APROVAL REMEDIATION
REMEDIATION CHANGE
CHANGETICKET
TICKET
ANALYSIS
ANALYSISAND
AND
PLANS
PLANS OPENED
OPENEDMANUALLY
MANUALLY (DUE
(DUETO
TORISK)
RISK) EXECUTED
EXECUTED CLOSED
CLOSED
BUILD
BUILD
WORK
WORK
For every 500

APP
APPTEAMS
TEAMS POTENTIALLY
POTENTIALLY
Servers 1 FTE
Digests Report and APPs GETTING
GETTING
EXCEPTIONS
EXCEPTIONS
MANY
MANY
APPROVALS
APPROVALS
Plans Remediation
Handled Manually Each Each Approver Slows

Exception is 2-3 Hrs, Exceptions Process – More Risk
are 2-3 per server per quarter More Approvers
SecOps Workflow
VULNERABILITIES
VULNERABILITIES REPORT
REPORT COMPLIANCE
COMPLIANCE
SECURITY DISCOVERED
DISCOVERED
WITH
WITHSCANS
SCANS
CREATED
CREATED
SENT
SENTTO
TOOPS
OPS
EXTRA
EXTRACHANGE
CHANGE
DOCUMENTATION
DOCUMENTATION
VERIFIED
VERIFIED
COMPLIANCE
COMPLIANCE
REPORTING
REPORTING
OPS
OPSDIGESTS
DIGESTS REMEDIATION
REMEDIATION
OPS
REPORT
REPORTAND
AND CHANGE
CHANGETICKET
TICKET CAB
CABAPROVAL
APROVAL REMEDIATION
REMEDIATION CHANGE
CHANGETICKET
TICKET
ANALYSIS
ANALYSISAND
AND
PLANS
PLANS OPENED
OPENEDMANUALLY
MANUALLY (DUE
(DUETO
TORISK)
RISK) EXECUTED
EXECUTED CLOSED
CLOSED
BUILD
BUILD
WORK
WORK
For every 500

Servers 1 FTE
APP
APPTEAMS
TEAMS POTENTIALLY
POTENTIALLY NOW AUTOMATED
Digests Report and APPs GETTING
GETTING
EXCEPTIONS
EXCEPTIONS
MANY
MANY
APPROVALS
APPROVALS
Plans Remediation
Handled Manually Each Each Approver Slows

Exception is 2-3 Hrs, Exceptions Process – More Risk
are 2-3 per server per quarter More Approvers
SecOps in BladeLogic 8.7
Reduce vulnerabilities by reducing
Click to add picture SecOps friction
• Automatic correlation of Qualys/Nessus

discovered vulnerabilities and BSA patches
— Most high severity vulnerabilities out of
the box
• Framework for manual association of
actions
— Config or validation actions
• Direct integration with Change

Management

What’s New in BladeLogic 8.7?
• Integrated into BladeLogic Portal
• Nessus support
• Honors BSA RBAC
• “Elastic search” for near
immediate searching
• Support for complex many-to-
one relationships
• Remediation and Assets

Demo: See It For Yourself!

Remediate Scans

Import Scans

Map Assets

Map Vulnerabilities

Set the Foundation

Assign Asset Groups

BMC BladeLogic 8.7
Bridging Agility and Security
Learn more at www.bmc.com/secops
• Download the Face the Facts of

Compliance paper
• Watch the State of Michigan success story
video
• Learn more about new features of
BladeLogic 8.7 and closing the SecOps gap
Thank You —
Bring IT to Life.™

Blade Logic

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Blade Logic

Uploaded by

Copyright:

Available Formats

BladeLogic 8.

ATTACKS FIX READY

 Audit trails are a series of screen shots

 Not tied to Change Management

© Copyright 2014 BMC Software, Inc. 6

For every 500

Handled Manually Each Each Approver Slows

For every 500

Handled Manually Each Each Approver Slows

• Automatic correlation of Qualys/Nessus

• Direct integration with Change

© Copyright 2014 BMC Software, Inc. 9

© Copyright 2014 BMC Software, Inc. 10

© Copyright 2014 BMC Software, Inc. 11

© Copyright 2014 BMC Software, Inc. 12

© Copyright 2014 BMC Software, Inc. 36

© Copyright 2014 BMC Software, Inc. 42

© Copyright 2014 BMC Software, Inc. 53

© Copyright 2014 BMC Software, Inc. 61

© Copyright 2014 BMC Software, Inc. 66

• Download the Face the Facts of

© Copyright 2014 BMC Software, Inc. 70

You might also like