StreamAlert: A Serverless Real-time Intrusion Detection Engine

YouTube·Intrusion Detection

Explore a serverless, real-time intrusion detection engine in this 19-minute conference talk from USENIX Enigma 2017. Discover how StreamAlert leverages AWS, Terraform, and Chef to enable security organizations to deploy and scale their intrusion detection capabilities to handle terabytes of data per hour. Learn about writing simple and complex rules for application, system, and network logs, and understand how StreamAlert eliminates common challenges related to availability, scalability, segmentation, and maintenance. Gain insights into the benefits, data types, platform architecture, and security features of StreamAlert, allowing security teams to focus on their core competency of detecting and responding to threats.