StreamAlert: A Serverless Real-time Intrusion Detection Engine

Explore a serverless, real-time intrusion detection engine in this 19-minute conference talk from USENIX Enigma 2017. Discover how StreamAlert leverages AWS, Terraform, and Chef to enable security organizations to deploy and scale their intrusion detection capabilities to handle terabytes of data per hour. Learn about writing simple and complex rules for application, system, and network logs, and understand how StreamAlert eliminates common challenges related to availability, scalability, segmentation, and maintenance. Gain insights into the benefits, data types, platform architecture, and security features of StreamAlert, allowing security teams to focus on their core competency of detecting and responding to threats.

Introduction
Show of Hands
Cost Time Staffing
Ideal Solution
StreamAlert
Benefits
Data Types
Platform
AWS Lambda
Security
Data
Rules
Matchers
Learning