AWS User Responsibilities and Future Security Predictions

In 2019, the incident in which the data of 100 million customers on AWS was leaked due to unauthorized access that exploited a WAF vulnerability had a great impact on society. This incident made AWS users once again aware of the importance of security measures as their responsibility. On the other hand, complex and fast-changing AWS security measures are not easy to implement.

The need for a shift in security measures

In order to consider security measures for AWS, assumptions different from attack methods used on-premises are required. In on-premises systems, the system itself becomes the target of attacks, such as methods that exploit vulnerabilities in servers and methods that infect devices with malware. On the other hand, AWS attackers target account credentials and privileges. Attackers illegally obtain authentication information by any means and infiltrate the AWS environment. If you have AWS IAM edit permissions, you can add IAM roles and policies to freely explore your environment, and finally access data storage services such as S3 to steal information. In the meantime, security tools such as Amazon GuardDuty may be disabled, making it difficult for attackers to notice their intrusion.

Vectra AI CDR (Cloud Detection and Response)

Existing cloud security solutions are typically focused on countermeasures against misconfigurations and access control. However, these are solutions aimed at minimizing the entry point for intrusion, and are different from those that identify and deal with threats from the perspective of incident response.

Therefore, there is "Cloud Detection and Response (hereafter, CDR)" as a solution to visualize the inside of the cloud environment and keep it in a secure state. CDR is a solution that detects and responds to threats for various workloads on the cloud.

Detect for AWS, one of Vectra AI's CDRs, is a new solution that covers AWS-specific attack methods and visualizes, detects, and responds to threats within AWS.

Deployment configuration

It is provided as SaaS. It takes about 10 minutes from installation to start of operation, and there is no construction load.
Please contact us if you would like a free trial.

Vectra AI MDR（Managed Detection and Response）

Vectra MDR (Threat Detection and Response Operations) Service

Combining Vectra's detection capabilities with the human intelligence of our team of analysts, we can respond more quickly to unknown threats.

Even after product introduction, the operational burden of your own SOC will not increase.
Our team of Vectra analysts is available 24/7 with their expertise.

Vectra AI's analyst team will use Vectra AI to monitor the customer's environment on behalf of the customer, as well as propose thread hunting and product usage optimization using Vectra AI.