Automation and orchestration represent a paradigm shift in how security operations are conducted. Automation involves the use of technology to perform tasks with minimal human intervention, streamlining processes such as threat detection, incident response, and system remediation. Orchestration goes a step further by integrating these automated tasks into a cohesive workflow, enabling seamless coordination across different security tools and systems. Together, these approaches can significantly improve the speed, accuracy, and efficiency of security operations.
The workshop will cover key topics including the fundamentals of security automation, the role of orchestration in creating unified security workflows, and best practices for implementing these technologies in a network security environment. Participants will gain hands-on experience with leading automation and orchestration platforms, explore real-world case studies, and engage in interactive sessions designed to solve practical security challenges.
Topics of Interest to the workshop include but are not limited to:
Network Security Management
Network monitoring, intrusion detection, incident triage
Asset management and vulnerability discovery
NetOps and SecOps, Network and Security Operations Centers (NOC, SOC)
Digital twins for security and resilience
Scalability and Interoperability in Network Security
Automation and orchestration of network security workflows
Security Orchestration, Automation, and Response (SOAR)
Cybersecurity Mesh Architecture (CSMA)
Large-scale deployments of network security tools
Resilience and Mitigation
Theoretical foundation of network and system resilience
Resilience assessment and modeling, attack impact assessment
Cyber situational awareness (CSA)
Attack mitigation and recovery
Applications in Specific Environments
Security and resilience in the Internet of Things (IoT) and Cyber-Physical Systems (CPS)
Security and resilience in cloud, fog, and edge computing
Security and resilience in Critical Information Infrastructures (CII)
Security and resilience in healthcare, energy sector, industrial robotics, smart cities, etc.