Kyndryl security operations platform with AWS
summary
Kyndryl presents a security operations platform that ingests normalized security findings into Amazon Security Lake using OCSF, stores data in S3 and an AWS data lake, and runs analyses in Kyndryl Bridge with QuickSight and QuickSight Q for natural language queries. A proof of concept uses real Security Lake preview data, an anomaly detector based on an algorithm roughly 120 years old, and anonymized aggregated storage. MVP targets release by year end, enriches signals with threat intel, industry and geography, and aims to dollarize risk via Open FAIR.
AI-written summary · about
chapters (6)
- 0:00Introduction to Kyndryl
- 0:47Amazon Security Lake and OCSF
- 2:51Kyndryl Bridge integration
- 4:49Security operations platform
- 8:50Advanced threat intelligence
- 11:24Conclusion and next steps
related talks
13mClosing the security visibility gap
22mUse generative AI and Amazon Security Lake to enhance threat analysis
13mCloud-powered security with Amazon Security Lake & PwC’s fusion center
17mUnifying Your Security Data with Amazon Security Lake and OCSF
47mDeveloping an autonomous framework with Security Lake & Torc Robotics
39mAmazon Security Lake: Analyze Multiple Security Events
17mArchitecting a security data lake at enterprise scale
39mPreparing for next-generation challenges