{"id":5093,"date":"2023-04-05T10:06:10","date_gmt":"2023-04-05T14:06:10","guid":{"rendered":"https:\/\/solutionsreview.com\/network-monitoring\/?p=5093"},"modified":"2023-04-06T09:45:39","modified_gmt":"2023-04-06T13:45:39","slug":"three-reasons-cybersecurity-is-struggling-with-network-visibility","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/","title":{"rendered":"Three Reasons Cybersecurity is Struggling with Network Visibility"},"content":{"rendered":"

\"network<\/p>\n

Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Martin Roesch of Netography<\/a> examines why cybersecurity struggles with network visibility, and what can be done about it.<\/strong><\/em><\/p>\n

\"ExpertFor the better half of a decade, SecOps has been focused on the SOC visibility triad, the ideal of obtaining visibility into logs, endpoints, and the network with a variety of specialized solutions. Unfortunately, traditional network security solutions, such as network detection and response (NDR), have been unable to keep pace with digital transformation trends, such as cloud migration. The slow and steady adoption of the cloud, combined with the sudden and irrevocable shift to enable work from anywhere, has atomized the network.<\/p>\n

To understand this atomization is to understand why network security solutions based on legacy architectures are no longer practical. In short, a dispersed, multi-cloud computing model is beyond the capabilities of legacy technology solutions, and the broad utilization of encryption has scrambled network traffic to the point that these solutions cannot inspect it, all while the deployment and management of appliances or sidecars and alerts have become increasingly complex and time-consuming.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Networks are Hybrid and Multi-cloud in Practice<\/strong><\/h3>\n

Within dispersed environments, users can access corporate data in cloud applications from their personal devices \u2013 often with no clear boundaries between them. Users, devices, applications, and data are everywhere. Cloud computing tends to magnify this complexity, while its on-demand capabilities and the unmanaged nature of many devices, both on-premise and remote, contribute to the ephemeral nature of this environment. These unmanaged devices include the personal devices of remote workers, as well as IoT devices, networking devices (e.g., switches and routers), and devices connected to complex operational technology (OT) environments.<\/p>\n

As a result, security and management solutions also tend to be dispersed across a diverse set of teams, responsibilities, and tools. Consequently, organizations typically have a fractured view of their environment. Solutions such as NDR fail to address blind spots because they are unable to provide visibility into many cloud services and unmanaged devices.<\/p>\n

Encryption Blinds Legacy Security Technology<\/strong><\/h3>\n

When it comes to encryption, it can be both the solution and the problem. NDR solutions cannot inspect traffic they cannot decrypt. Workarounds for this challenge tend to be complex and costly to implement. It is vital for organizations to be able to obtain a level of visibility into this traffic because privileged access tends to be encrypted, such that threat actors could take control of a valuable account without being detected if they\u2019re not being observed by any security technology due the deployment limitations of security technology. This is not to say that organizations should abandon encryption, but it does mean that organizations need to bring their visibility capability up to the maturity level of their encryption.<\/p>\n

Legacy Solutions are Complex to Deploy and Time-Consuming to Manage<\/strong><\/h3>\n

When security teams analyze the effectiveness of traditional network security solutions, many find that they have gaps in coverage because they cannot deploy sensors everywhere. Decisions tend to be made balancing risk with a budget, which frequently results in NDR deployments into data centers and nowhere else. Deploying sensors and agents on cloud workloads is expensive and technically challenging. Unfortunately, when an event happens outside the purview of these sensors, a security analyst is left in a fog.<\/p>\n

Even when NDR solutions are able to inspect traffic, detection often falls short because NDR solutions lack granular policy management. Security teams should already have operational compliance policies that dictate the communication patterns of devices and users. For example, they know that an operational technology (OT) device should never connect to a non-RFC1918 address, but NDR solutions are unable to create rules that match this sort of criteria due to a lack of being able to consider the context.<\/p>\n

Go With the Flow \u2013 NetFlow Data<\/strong><\/h3>\n

Next-generation firewalls (NGFWs) and intrusion prevention systems (IPS) face the same problems outlined above. Essentially, any solution that relies on deep packet inspection (DPI) delivered through a hardware appliance is ill-equipped for the realities of a modern network. Consequently, many organizations are struggling with visibility into their network. The good news is that organizations have become aware of these challenges and are ready to face them. But how?<\/p>\n

It turns out there is a more innovative approach to examining network traffic in order to detect and protect against attacks. If we refer back to the SOC visibility triad, organizations can leverage metadata data in the form of NetFlow data for network intelligence in the same way they leverage logs for security information and event management (SIEM).<\/p>\n

NetFlow data is a digital record of network connections, which includes source and destination IP, traffic volume, and the type of service used (among other details). NetFlow data can be obtained from multiple sources at once, and, when enriched with context, provides a comprehensive and real-time view of the network. This sort of real-time monitoring enables organizations to detect advanced attacks that may otherwise go undetected. Furthermore, NetFlow data provides a historic record for SOC teams tasked with incident response and threat hunting. Having the ability to retrospectively research network activity enables organizations to stay a few steps ahead of threats. NetFlow data also enables security teams to keep pace with the speed of change in modern networks, as these digital records can be obtained from on-premise and cloud environments.<\/p>\n

Final Thoughts on Network Visibility<\/strong><\/h3>\n

Fortunately, there\u2019s no need to capture and inspect full packets when visibility into network traffic can be made based on metadata from the network itself. Modern enterprise networks lend themselves to modern solutions that go beyond relying on DPI. NetFlow-based methods provide a more scalable, flexible, and comprehensive path to achieving visibility into atomized networks.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"

Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Martin Roesch of Netography examines why cybersecurity struggles with network visibility, and what can be done about it. For the better half of a decade, SecOps has been focused on the SOC visibility triad, the ideal […]<\/p>\n","protected":false},"author":604,"featured_media":5091,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1,21],"tags":[],"acf":[],"yoast_head":"\nThree Reasons Cybersecurity is Struggling with Network Visibility<\/title>\n<meta name=\"description\" content=\"Martin Roesch of Netography examines why cybersecurity struggles with network visibility, and what can be done about it.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Three Reasons Cybersecurity is Struggling with Network Visibility\" \/>\n<meta property=\"og:description\" content=\"Martin Roesch of Netography examines why cybersecurity struggles with network visibility, and what can be done about it.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Network Monitoring Vendors, Software, Tools and Performance Solutions\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-05T14:06:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-06T13:45:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/04\/Three-Reasons-Cybersecurity-is-Struggling-with-Network-Visibility.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Martin Roesch\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Martin Roesch\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/\",\"name\":\"Three Reasons Cybersecurity is Struggling with Network Visibility\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/04\/Three-Reasons-Cybersecurity-is-Struggling-with-Network-Visibility.jpg\",\"datePublished\":\"2023-04-05T14:06:10+00:00\",\"dateModified\":\"2023-04-06T13:45:39+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/79aabfbc500901d6bc6c01ac9253eaf4\"},\"description\":\"Martin Roesch of Netography examines why cybersecurity struggles with network visibility, and what can be done about it.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/04\/Three-Reasons-Cybersecurity-is-Struggling-with-Network-Visibility.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/04\/Three-Reasons-Cybersecurity-is-Struggling-with-Network-Visibility.jpg\",\"width\":800,\"height\":400,\"caption\":\"network visibility\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/network-monitoring\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Three Reasons Cybersecurity is Struggling with Network Visibility\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#website\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/\",\"name\":\"Best Network Monitoring Vendors, Software, Tools and Performance Solutions\",\"description\":\"Solutions Review Network Monitoring\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/network-monitoring\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/79aabfbc500901d6bc6c01ac9253eaf4\",\"name\":\"Martin Roesch\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/db133e5a8ea3f2ed8fb862f98ab8e19b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/db133e5a8ea3f2ed8fb862f98ab8e19b?s=96&d=mm&r=g\",\"caption\":\"Martin Roesch\"},\"description\":\"Martin Roesch is the CEO of Netography, Inc. With over 25 years of experience in information security and embedded systems engineering, Marty is a pioneer in the industry as one of the first entrepreneurs to successfully commercialize open-source software in addition to creating the global standard for describing and detecting network-based attacks. In 2001 he founded Sourcefire, serving as CEO\/CTO, until the 2013 acquisition by Cisco for $2.7 billion, where he went on to lead the Security Business Group as Chief Architect. He is the original author and lead developer of the Snort Intrusion Detection and Prevention System that formed the foundation for the Sourcefire product suite. He has received substantial recognition over the course of his career for innovation and was selected as one of the Top 25 Disrupters of 2013 by CRN Magazine as well as one of eWeek\u2019s Top 100 Most Influential People in IT. He holds a B.S. in Electrical and Computer Engineering from Clarkson University.\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/author\/mroesch\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Three Reasons Cybersecurity is Struggling with Network Visibility","description":"Martin Roesch of Netography examines why cybersecurity struggles with network visibility, and what can be done about it.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/","og_locale":"en_US","og_type":"article","og_title":"Three Reasons Cybersecurity is Struggling with Network Visibility","og_description":"Martin Roesch of Netography examines why cybersecurity struggles with network visibility, and what can be done about it.","og_url":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/","og_site_name":"Best Network Monitoring Vendors, Software, Tools and Performance Solutions","article_published_time":"2023-04-05T14:06:10+00:00","article_modified_time":"2023-04-06T13:45:39+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/04\/Three-Reasons-Cybersecurity-is-Struggling-with-Network-Visibility.jpg","type":"image\/jpeg"}],"author":"Martin Roesch","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Martin Roesch","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/","url":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/","name":"Three Reasons Cybersecurity is Struggling with Network Visibility","isPartOf":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/04\/Three-Reasons-Cybersecurity-is-Struggling-with-Network-Visibility.jpg","datePublished":"2023-04-05T14:06:10+00:00","dateModified":"2023-04-06T13:45:39+00:00","author":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/79aabfbc500901d6bc6c01ac9253eaf4"},"description":"Martin Roesch of Netography examines why cybersecurity struggles with network visibility, and what can be done about it.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#primaryimage","url":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/04\/Three-Reasons-Cybersecurity-is-Struggling-with-Network-Visibility.jpg","contentUrl":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/04\/Three-Reasons-Cybersecurity-is-Struggling-with-Network-Visibility.jpg","width":800,"height":400,"caption":"network visibility"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/network-monitoring\/three-reasons-cybersecurity-is-struggling-with-network-visibility\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/network-monitoring\/"},{"@type":"ListItem","position":2,"name":"Three Reasons Cybersecurity is Struggling with Network Visibility"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#website","url":"https:\/\/solutionsreview.com\/network-monitoring\/","name":"Best Network Monitoring Vendors, Software, Tools and Performance Solutions","description":"Solutions Review Network Monitoring","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/network-monitoring\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/79aabfbc500901d6bc6c01ac9253eaf4","name":"Martin Roesch","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/db133e5a8ea3f2ed8fb862f98ab8e19b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/db133e5a8ea3f2ed8fb862f98ab8e19b?s=96&d=mm&r=g","caption":"Martin Roesch"},"description":"Martin Roesch is the CEO of Netography, Inc. With over 25 years of experience in information security and embedded systems engineering, Marty is a pioneer in the industry as one of the first entrepreneurs to successfully commercialize open-source software in addition to creating the global standard for describing and detecting network-based attacks. In 2001 he founded Sourcefire, serving as CEO\/CTO, until the 2013 acquisition by Cisco for $2.7 billion, where he went on to lead the Security Business Group as Chief Architect. He is the original author and lead developer of the Snort Intrusion Detection and Prevention System that formed the foundation for the Sourcefire product suite. He has received substantial recognition over the course of his career for innovation and was selected as one of the Top 25 Disrupters of 2013 by CRN Magazine as well as one of eWeek\u2019s Top 100 Most Influential People in IT. He holds a B.S. in Electrical and Computer Engineering from Clarkson University.","url":"https:\/\/solutionsreview.com\/network-monitoring\/author\/mroesch\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts\/5093"}],"collection":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/users\/604"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/comments?post=5093"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts\/5093\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/media\/5091"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/media?parent=5093"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/categories?post=5093"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/tags?post=5093"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}