August 23, 2018: Invited Speaker Seminar: SOAR: Innovation for Efficient Security Operations

Dr. François Cosquer
CTO, Nokia

Thursday, August 23, 2018 at 2:00 pm
Room EV002.184

Abstract

The proliferation of IoT devices, pervasive high bandwidth networks and acceleration of Cloud adoption has led to a new order of magnitude in potential attack vectors. In response to the increase of exposure, the security industry has produced over the past 20+ years an ever growing set of point security solutions. As a result, Security Operations Centers (SOC) cannot face the overwhelming number of alarms and associated labor intensive investigations. Security Orchestration Automation and Response (SOAR) is a new approach which reduces incident response time by integration of Threat Intelligence, Security Analytics and Automated Predictive Response. By leveraging multi-dimensional security analytics and automation, SOAR can significantly improve security operations in the field. After illustrating the current situation faced by SOCs, this talk will introduce the key concepts of SOAR as well as present initial use cases. Finally, we will explore the existing and anticipated challenges.

Biography

Dr. François Cosquer is currently CTO Security for Nokia Software with particular focus on NFV Security. In close collaboration with elite customers, his responsibilities cover defining guidelines and best practices for end to end solutions including supporting security R&D lifecycle from security requirements to security testing and validation. He also supports audits, incidents response and root cause analysis activities. In collaboration with Bell Labs research he develops technical direction, provides design and architecture expertise to end to end solutions. François graduated in Electronics and Computing and holds an MSc in Computer Science and a PhD in Computer Engineering. He currently serves as Affiliate Professor at the Faculty of Engineering and Computer Science, Concordia University, Montreal. For his stewardship of the cybersecurity community he was nominated IEEE WTS Fellow and recent recipient of the IEEE CQR Chairman Award.