Managed Security Services (MSS)
Managed Security Service (MSS) protects information assets of the customers for 24/7/365.
Various threats like intrusion attempts and internal information leakage are increasing every hour. Managed Security Service of IGLOO Corporation analyzes vulnerabilities and detects illegal intrusion attempts in advance through real-time monitoring and protects your information assets for 24/7/365 with systematic monitoring service.
-
Need for MSS
-
Company A, a small to medium sized company, has continued solid growth by succeeding in an innovative product it has invested in for years. It also actively made investments in IT infrastructure and information security, and continued its investment in IT system, network, firewall, IPS/IDS, DDoS, and WAF. However, the internal information of company A has been leaked from hacking using malicious codes by a hacker last year. The problem was, it took around 30 days for the security manager to find this out, and almost 4 months to verify the causation and removing the malicious codes.
-
IT manager of company A
While it’s already hard to manage and operate IT infrastructures becoming more and more complicated, it is even harder to manage and operate increasing security systems
-
IT team leader of company A
We are lacking security experts and budgets
for adopting a security product… -
CIO of company A
How can we reduce excessive initial investment while innovatively
raising the security level of the company?
There was a time when information assets can be protected by only installing an antivirus on a PC. But how is it today? Although companies intend to protect the company asset by high cost security devices, more complicated and intelligent cyber threats are becoming common and the damage effects are critical than ever.
Then, what can we do to protect our information assets?
-
-
MSS Introduction
-
The Managed Security Service efficiently and effectively implements information security duties via professional information security company to prevent intrusion attempts from outside and protects internal information assets. Managed Security Service aims to prevent cyber threats and reinforce security in advance by detecting, blocking, and responding to cyber attacks by collecting security events detected from heterogeneous systems of customer companies.
-
Managed Security Service of IGLOO Corporation
-
-
24/7 Managed Security
Security event monitoring
Respond/analyze cyber threats
Detect web-forgery and denial-of-service
Operate/manage security devices
Apply/manage security policies
System check
-
Advanced Prevention
Diagnose infrastructural vulnerabilities
Pen-test
Provides latest security trend news
Diagnose source code
Inspect security status
Diagnose security level
Simulation training (for malicious email)
-
Other Security Support
Support various certifications
Support guide/manual amendment
Support information security legal action
Implement security training
-
-
Advantages
-
-
1
People
Reinforce competency of Managed Security Services personnel and security manager through IGLOO School
Improve security competency and knowledge through education and training
Improve practical response ability and response system by comprehensive scenario-based training
-
2
Process
Need for optimized process & system through consistent training and inspection
Apply Managed Security Services methodology accumulated from many years experience
Need for cooperation and joint response with related organizations on increasing cyber attacks
Final response → National response
-
3
Technology
Optimized integrated Managed Security Services system that can integrate and implement monitoring duties
Intelligence-based information analysis, big data-based log processing technology, full packet capture
Precise operating ability for diverse information protection systems, systems and network devices
Share monitoring rules through the Knowledge Center
-
1
-
Types of MSS
-
Types Pros Cons On-Site MSS
Provides specialized monitoring services
Immediate communication between managers and monitoring personnel
Supports immediately deal with cyber-threats and failures
Enhances work continuity and efficiency
Supports expansion or system structural changes of websites and system by clearly understanding the situation of customer
Requires HR management (off day, replacement, etc.)
High unit price
Remote MSS
Low unit price compared to On-Site MSS
HR management not required
Monitoring available through internet network and not requiring building a separate line
Provides limited service
Occurrence of difficulty in monitoring service specialized for dispatched monitoring website
Difficulty in immediate response (although immediate notification is possible, HR deployment is required for some cases)
On-Site MSS + Remote MSS
Convergence of advantages of Remote MSS and On-Site MSS
Direct Communication and site-based specialized policy establishment possible
Responds to incidents immediately through the on-site personnel and then cooperate with remote monitoring team
Support site configuration modification and policy establishment
Difference in service quality according to the level of on-site MSS operators
Requires HR management (off day, replacement, etc.)
-
On-Site MSS
Pros
Provide specialized monitoring services
Communicate directly between manager and monitoring personnel
Immediately deal with cyber-threats and failures
Enhances work continuity and efficiency
Support expansion or system structural changes of websites and system by clearly understanding the situation of customer
Cons
Requires HR management (off day, replacement, etc.)
High unit price
-
Remote MSS
Pros
Low unit price compared to On-Site MSS
HR management not required
Monitoring available through internet network and does not require building a separate line
Cons
Provides limited service
Occurrence of difficulty in control service specialized for dispatched control website
Difficulty in immediate response (although immediate notification is possible, HR deployment is required for some cases)
-
On-Site MSS + Remote MSS
Pros
Convergence of advantages of Remote MSS and On-Site MSS
Direct Communication and site-based specialized policy establishment possible
Respond to incidents immediately through the on-site personnel and then cooperate with remote monitoring team
Support site configuration modification and policy establishment
Cons
Difference in service quality according to the level of on-site MSS operators
Requires HR management (off day, replacement, etc.)
-
-
MSS Process
-