AppSec Europe 2018

Today, securing an enterprise involves collecting and sifting mountains of data to defend against attackers moving at network speed. Automating aspects of enterprise security is the only way to deal with this situation at scale, but the term "security automation" is frequently overhyped and the promised benefits are often hard to realize. This talk will provide an overview of several ongoing security automation efforts that are supported by the US government and international standards bodies. These efforts seek to provide concrete advances that can support a faster, more efficient, and more effective way to defend networks through automation with the creation and promulgation of open specifications that can be employed by all nations and vendors.