ну прежде чем запустить опросы на остальное, давайте поспорим.
Вот моя таксономия. и я явно что-то забыл из популярного, или наоборот какой то функционал вытащил в отдельный класс.
Защита данных:
DLP (Data Loss Prevention)
DAM / DBF (Database Activity Monitoring / Database Firewall)
DAG / DCAP (Data Access Governance / Data-Centric Audit and Protection)
Data Encryption
VDR / EFSS (Virtual Data Room / Enterprise File Sync & Share)
Защита инфраструктуры:
NGFW (Next-Generation Firewall)
IDS/IPS (Intrusion Detection/Prevention System; NIDS/NIPS/HIDS/HIPS)
ZTNA/SDP (Zero Trust Network Access / Software Defined Perimeter)
SWG (Secure Web Gateway)
SEG (Secure Email Gateway)
CASB (Cloud Access Security Broker)
NAC (Network Access Control)
VPN (Virtual Private Network)
EPP/AV (Endpoint Protection Platform / Antivirus)
MDM (Mobile Device Management)
Защита приложений:
AST (Application Security Testing; SAST, DAST, IAST, MAST)
SCA (Software Composition Analysis)
CWPP (Cloud Workload Protection Platform, например Container security)
ASOC / ASPM (Application Security Orchestration and Correlation / Application Security Posture Management)
AntiDDos L7 / Antibot
WAF (Web Application Firewall)
API Security
CNAPP (Cloud-Native Application Protection Platform)
Управление ИБ (процессы, права, риски):
ASM (Attack Surface Management)
VM (Vulnerability Management)
BAS (Breach and Attack Simulation)
CM (Configuration Management)
ITSM/CMDB (IT Service Management / Configuration Management Database)
GRC (Governance, Risk and Compliance)
SA (Security Awareness)
DRM/IRM (Digital/Information Rights Management)
IAM (Identity and Access Management)
IGA (Identity Governance and Administration)
PAM (Privileged Access Management)
KMS/PKI (Key Management System / Public Key Infrastructure)
Выявление и реагирование:
SIEM (Security Information and Event Management)
IRP / SOAR (Incident Response Platform / Security Orchestration, Automation and Response)
SandBox
TIP (Threat Intelligence Platform)
DRP (Digital Risk Protection)
EDR (Endpoint Detection and Response)
NDR/NTA (Network Detection and Response / Network Traffic Analysis)
Deception (Deception Technology)
ITDR (Identity Threat Detection and Response)
Антифрод
Post #1687
258
Forwarded from vbengin
- 🤔 3
- 🤯 3