Speaker: Jeff Boerio
To minimize the threat posed by malicious software, or malware, making its way into the enterprise, Intel IT has established a process that actively seeks to identify and take action against the malware before it reaches Intel’s user base. This process focuses on real-time monitoring and interpretation of security events on the network and taking immediate action against any identified threats. The paper describes the process of detecting and addressing new malicious code threats in a global enterprise environment. Since implementing our security event monitor and detection processes, we have seen a 40 percent decrease in the number of formal incident response events.