Biz - Private and Public hybrid-cloud is advancing Recruit's business. Robust Security on both Infrastructures - To advance our business, it is necessary to have hybrid-cloud services that have solid security solutions and infrastructure. RSA Cloud Solution boost us - The advancement of Netwitness and TAP technologies promotes advancement in the security sector.
Users by Making Life Easier and More Fulfilling through Optimized Matching Matching Platform Consumers USER Enterprise CLIENT Clients pay money for a contribution of linking clients to customers.
Area Travel Business Lifestyle Health & Beauty Job Hunt Marriage Job Change Home Purchase Car Purchase Child Birth Education Information services that support choice
Project Management UXD/SEO Internet Marketing Big Data Solutions Technology R&D Systems Development Recruit Holdings Recruit Career Recruit Sumai Company Recruit Lifestyle Recruit Jobs Recruit Staffing Recruit Marketing Partners Staff Service Holdings Recruit Technologies Recruit Administration Recruit Communications Business/ Service Function/ Support
Recruit Technologies Security Management Office Board Business security System security Security Architecture Group Strategy Group Consulting Group SOC IR QM
Strategy Group Consulting Group Security Architecture Group Testing and introduction of advanced security solutions, systems operation Implementation of overall rules governing security Review of security measures for new Web development SOC IRG QM Security Operation Center Incident Response Quality Management Insourced from Recruit-CSIRT
threat detection: IDS and WAF ▪ No way of checking impact on the detected communication (data leak or not) or whether an attack was successful ▪ Even if there was a way, investigations are time-consuming and expensive ▪ To ascertain these impacts, we wanted to record all communications and use them in our investigations Implementation of NetWitness network forensics
traffic going through the detection tools is extracted, so it can be analyzed after detection. SPAN 10G×6 1G×6 1G×6 1G×1 Internet attack attack GigaVue-HD4 IDS/ WAF SA Server Concentrator ×6 Decorder ×6
Gigaview Agent Gigamon Decoder Concentrator Server Collection of Captured Packets Transfer of Captured Packets Transfer of Captured Packets GigaVUE-FM Control Control Link External ELB WAF Internal ELB Packet Capture Use On premise RNWS incompatibility On premise Gigamon is necessary To link with On premise Netwitness, On premise Gigamon is necessary customer
VM On-premis Environment Gigaview Agent Concentrator Server Collection of Captured Packets Transfer of Captured Packets Link GigaVUE-FM Control External ELB WAF Internal ELB Packet Capture Decoder Unnecessary! customer
2017 Planning Environment Testing Reporting Testing completed January February March 2017 Structure Requirements Test items Environment construction Operability Functions Failure procedures Summary Testing environment construction completed
Overall planning & test items Overall Direction RSA NetWitness Packets for AWS Visibility Platform for AWS AWS Gigamon environment, testing & technical support AWS environment preparation ・Each company filled the following roles
Non-steady Operation Monitoring Recovery Admin Steady Operation ・NTP・DNS・Puppet operation ・Connection to Web UI console ・Confirmation of admin interface access ・Appliance OS operation, status checks using Web GUI ・Appliance status check ・Investigation, LIVE, Rest API, Report operation ・Incident analysis, verification points, operation check ・Polling using SNMP ・OS reboot ・Effects of suspension of optional components on operation of other components ・Backup and restore operations for all components
- Private and Public hybrid-cloud is advancing Recruit's business. Robust Security on both Infrastructures - To advance our business, it is necessary to have hybrid-cloud services that have solid security solutions and infrastructure. RSA Cloud Solution boost us - The advancement of Netwitness and TAP technologies promotes advancement in the security sector.