Alexander Marmalidi

Featured in:

Articles

Hardware for SIEM systems

Dec 20, 2024 | kaspersky.com | Alexander Marmalidi

At some point, the information security department of any large company inevitably begins to consider introducing a SIEM system — or replacing the existing one, and must therefore estimate the budget required for its deployment. But SIEM isn’t a lightweight product that can be deployed within existing infrastructure. Almost all solutions in this category require additional hardware, meaning that equipment must be purchased or rented.
Security and privacy settings in ASICS Runkeeper

Nov 5, 2024 | kaspersky.com | Alanna Titterington |Alexander Marmalidi |Stan Kaminsky |Sergey Soldatov

We’ve already discussed how most tracking apps provide minimal protection for your personal data by default. Routes and workout times, your fitness data and photos from your runs are usually publicly available online unless you explicitly block them. The consequences, as we’ve written, can be disastrous — ranging from leaks of secret facility locations to stalking and even attempted murder. To avoid this, you need to configure both your smartphone in general and running apps in particular.
Improvements to our SIEM for Q3 2024

Nov 2, 2024 | kaspersky.com | Alexander Marmalidi

Clearly, the sooner malicious actions come to the attention of security solutions and experts, the more effectively they’re able to minimize, or even prevent damage. Therefore, while working on new detection rules for our SIEM system named the Kaspersky Unified Monitoring and Analysis Platform, we pay special attention to identifying attackers’ activity at the very initial stage of an attack, when they try to collect information about infrastructure.
Episode 360 looks at fake Taylor Swift, Nvidia un the docs, TV ads and much more!

Aug 23, 2024 | kaspersky.com | David Buxton |Alexander Marmalidi |Stan Kaminsky

Episode 360 of the transatlantic cable podcast kicks off with news that Nvidia are on the receiving end of a class-action law-suit, alleging that they scraped YouTube videos without creators’ consent. From there, the team discuss news around Taylor Swift AI images being shared by Donald Trump and an additional story around how photography is quickly being swamped by generative A.I.To close, the team discuss a story around how your humble television is being invaded by advertisers.
Improvements to our SIEM in Q2 2024

Aug 22, 2024 | kaspersky.com | Alexander Marmalidi |Stan Kaminsky

We meticulously study the techniques most frequently used by attackers, and promptly refine or add detection logic to our SIEM system to identify those technics.
Kaspersky SIEM: normalizers and correlation rules

Jun 6, 2024 | kaspersky.com | Alexander Marmalidi |Stan Kaminsky

A security information and event management (SIEM) system can’t remain static; its detection logic needs to constantly evolve. The threat landscape is ever-changing, which means you need to keep adding new rules regularly for effective data analysis. Admittedly, the bulk of correlation rules are inevitably fine-tuned by the internal information security team, but having up-to-date rules out of the box is crucial in easing this process.
Updating our SIEM system to version 3.0.3

May 21, 2024 | kaspersky.com | Stan Kaminsky |Alexander Marmalidi

For many InfoSec teams, security information and event management (SIEM) is at the heart of what they do. A company’s security depends to a large extent on how well its SIEM system allows experts to focus directly on combating threats and avoid routine tasks. That’s why almost every update of our Kaspersky Unified Monitoring and Analysis Platform is aimed at improving the user interface, automating routine processes and adding features to make the work of security teams easier.