Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Latest Comment: This comment is waiting for review by our moderators.
2021 Top Enterprise IT TrendsWe've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Building the SOC of the Future
Digital transformation, cloud-focused attacks, and a worldwide pandemic. The past year has changed the way business works and the way security teams operate. There is no going back.
Tweet This
0 Comments
User Rank: Strategist
8/21/2019 | 12:10:37 PM
It's also true that many tools in use today were designed for data centers and monolithic application architectures. The cloud, microservices, distributed and decentralized application architectures have radically changed both the playing field and the game for many of the tools and techniques out there.
TLS 1.3 / TLS 1.2 with PFS renders MITM decryption unusable at worst and impractical at best. Tools that rely on decrypted packet traffic for inspection, detection and troubleshooting are out of luck when orgs are in the cloud and DevOps is pulling in 3rd party APIs from all over to create their next-gen apps.
The best way to extend the life of those old tools is to keep delivering decrypted network traffic to them. An out-of-band decryption solution that uses symmetric key intercept (rather than relying on certs / pub / private keys) can continue to extend life of existing inspection, DLP, APT, DPI and monitoring tools. Of course, it's got to be able to run in the cloud, or an outpost or data center.