Threat Intelligence

3/14/2019
03:35 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Onapsis and Exabeam Partner to Bring ERP to the Security Operations Center

New integration Improves Monitoring, Threat Detection, Incident Response and Compliance

Boston, MA – March 13 - Onapsis, the global leader in ERP cybersecurity and compliance, today announced a technology alliance and product integration with Exabeam, the Smarter SIEM TM company, to give security teams access to enterprise resource planning (ERP) vulnerability logs in their security incident and event management (SIEM) for security monitoring, threat detection, incident response and audit compliance.

Global 2000 organizations run their business on, and store their sensitive data in, ERP applications such as SAP and Oracle E-Business Suite. Nation-state threat actors, hacktivitists and cybercriminals are turning their sights to these systems with targeted campaigns using technology found on the dark web. Many organizations remain vulnerable, having not updated security patches, despite warnings from DHS US CERT to update critical patches, or because they continue to rely on legacy security approaches. In addition, a lot of the biggest breaches broke through the perimeter with phishing, third parties, or common vulnerabilities and then pivoted to compromise ERP systems.

By making business-critical ERP applications an integrated part of the Security Operations Center (SOC), organizations gain visibility and context needed to investigate and respond to incidents and comply with data-intensive regulations such as GDPR. The new joint solution integrates Onapsis and the Exabeam Security Management Platform (SMP) to allow security teams to quickly detect and respond to threats by providing them with continuous visibility of ERP vulnerabilities, additional context to investigate security alerts and the ability to quickly respond to incidents.

The new integration allows the Exabeam SMP to ingest ERP vulnerability logs from Onapsis via syslog to gather all the critical vulnerabilities, misconfigurations and ERP security events detected by Onapsis. ERP data is combined with data from other systems, modeled using behavioral analytics, and displayed in Exabeam Smart Timelines™, machine-created timelines of user and device behavior, so analysts can quickly detect and investigate attacker tactics, techniques and procedures.

“InfoSec professionals today work in a threat environment where they face adversaries with unprecedented sophistication, persistence and technology,” said Ted Plumis, VP of Worldwide Channels at Exabeam. “We are excited to work with Onapsis to deliver a streamlined security solution for ERP systems. This partnership ensures that our mutual customers can quickly identify suspicious activity and remediate threats in their environment.”

“We are excited to be onboard as a partner of Exabeam and combining our product offerings. With the growing trend in attacks targeting the organization’s core applications, it is imperative that security teams understand and evaluate the logs and events of their ERP systems. Our partnership with Exabeam will allow companies to gain awareness into the security posture of their ERP business applications as it will now be fed into and displayed on their SIEM dashboard,” said Darren Gaeta, VP of Worldwide Alliances and Channels, Onapsis Inc.

The Onapsis Security Platform™ is the most widely-used SAP-certified cybersecurity solution on the market. Unlike generic security products, Onapsis's context-aware solution delivers both preventative vulnerability and compliance controls, as well as real-time detection and incident response capabilities to reduce risks affecting critical business processes and data.

About Onapsis

Onapsis cybersecurity solutions automate the monitoring and protection of your SAP and Oracle applications, keeping them compliant and safe from insider and outsider threats. As the proven market leader, global enterprises trust Onapsis to protect the essential information and processes that run their businesses.

Headquartered in Boston, MA, Onapsis serves over 200 customers including many of the Global 2000. Onapsis's solutions are also the de-facto standard for leading consulting and audit firms such as Accenture, Deloitte, E&Y, IBM, KPMG and PwC. For more information, please visit www.onapsis.com, or connect with us on Twitter, Google+, or LinkedIn.

About Exabeam

 

Exabeam is the Smarter SIEMTM company. We empower enterprises to detect, investigate, and respond to cyberattacks more efficiently so their security operations and insider threat teams can work smarter. Security organizations no longer have to live with excessive logging fees, missed distributed attacks and unknown threats, or manual investigations and remediation. With the Exabeam Security Management Platform, analysts can collect unlimited log data, use behavioral analytics to detect attacks, and automate incident response, both on-premises or in the cloud. Exabeam Smart TimelinesTM, sequences of user and device behavior created using machine learning, further reduce the time and specialization required to detect attacker tactics, techniques, and procedures. For more information, visit  https://www.exabeam.com.

Exabeam, Smarter SIEM, Smart Timelines and Security Management Platform are trademarks of Exabeam, Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © 2019 Exabeam, Inc. All rights reserved.

 

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
It Takes an Average of 3 to 6 Months to Fill a Cybersecurity Job
Kelly Jackson Higgins, Executive Editor at Dark Reading,  3/12/2019
Cybercriminals Think Small to Earn Big
Dark Reading Staff 3/12/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: LOL  Hope this one wins
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
The State of Cyber Security Incident Response
The State of Cyber Security Incident Response
Organizations are responding to new threats with new processes for detecting and mitigating them. Here's a look at how the discipline of incident response is evolving.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-6149
PUBLISHED: 2019-03-18
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.
CVE-2018-15509
PUBLISHED: 2019-03-18
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).
CVE-2018-20806
PUBLISHED: 2019-03-17
Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).
CVE-2019-5616
PUBLISHED: 2019-03-15
CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser.
CVE-2018-17882
PUBLISHED: 2019-03-15
An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Ethereum token. This vulnerability could be used by an attacker to create an arbitrary amount of tokens for any user.