SOAR - a first principle idea. [CSO Perspectives}

Published: Jan. 17, 2022, 7 a.m.

b'Rick explains the network defender evolution from defense-in-depth in the 1990s, to intrusion kill chains in 2010, to too many security tools and SOAR in 2015, and finally to devsecops somewhere in our future.\\xa0\\nResources:\\n\\n\\u201cCybersecurity First Principles: DevSecOps.\\u201d by Rick Howard, CSO Perspectives, The CyberWire, 8 June 2020.\\n\\n\\u201cFAQ,\\u201d RSA Conference, 2020.\\n\\n"Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains,\\u201d by Eric Hutchins, Michael Cloppert, Rohan Amin, Lockheed Martin Corporation, 2010, last visited 30 April 2020.\\xa0\\xa0\\n\\n\\u201cMalware? Cyber-crime? Call the ICOPs!\\u201d by Jon Oltsik, CSO, Cybersecurity Snippets, 22 June 2015.\\n\\n\\u201cMarket Guide for Security Orchestration, Automation and Response Solutions,\\u201d by Gartner, ID G00727304, 21 September 2020.\\xa0\\n\\n\\u201cMITRE ATT&CK,\\u201d by Mitre.\\n\\n\\u201cThe Cybersecurity Canon: The Phoenix Project: A Novel About IT, DevOps, and Helping Your Business Win,\\u201d book review by Rick Howard, Palo Alto Networks, 21 October 2016.\\n\\n\\u201cThe Cyber Kill Chain is making us dumber: A Rebuttal,\\u201d by Rick Howard, LinkedIn, 29 July 2017.\\n\\n\\u201cThe Evolution of SOAR Platforms,\\u201d by Stan Engelbrecht, SecurityWeek, 27 July 2018.\\n\\n\\u201cWhat is SOAR (Security Orchestration, Automation, and Response)?\\u201d by Kevin Casey, The Enterprisers Project, 30 October 2020.'