Sumo Logic to Scale SecOps for Modern Enterprises with Wave of New Innovations Built on Leading Log Analytics Platform

Rhea-AI Summary

On April 25, 2023, at the RSA Conference, Sumo Logic (NASDAQ: SUMO) unveiled innovative upgrades to its SaaS analytics platform aimed at enhancing security operations. Key features include:

• Native UEBA Threat Detection: Offers improved anomaly detection minimizing false positives and enhancing transparency.
• Cloud SIEM Automation Service: Integrates SOAR and SIEM for efficient threat context and alerts management.
• ML-Powered Insight Trainer: Uses machine learning to refine detection logic, elevating overall security effectiveness.

The integration of ChatGPT enhances investigation workflows, providing security teams with accelerated decision-making capabilities. These advancements are positioned to bolster security collaboration across teams, addressing the complexities of cloud application threats.

Positive

• Introduced native UEBA capabilities, improving anomaly detection and reducing false positives.
• Launched Cloud SIEM Automation Service for efficient threat management and context enhancement.
• Introduced ML-powered Insight Trainer to help minimize false positives and improve detection logic.
• Integration of ChatGPT accelerates security investigations and enhances decision-making.

Negative

• None.

• Applies detection logic to behavior modeling with UEBA
• Cloud SOAR features added to Cloud SIEM power new Automation Service
• ML-powered detection lowers false positives with Cloud SIEM Insight Trainer; introduces integration of ChatGPT to accelerate security investigations
  

SAN FRANCISCO, April 25, 2023 (GLOBE NEWSWIRE) -- RSA Conference -- Sumo Logic (NASDAQ: SUMO), the SaaS analytics platform to enable reliable and secure cloud-native applications, today announced several native innovations across the Sumo Logic platform to give security analysts better visibility to solve new use cases and enable coordinated defense.

“Siloed tools and teams are a major barrier to scaling security operations and addressing the dynamic threat landscape of cloud-developed applications,” said Dave Frampton, SVP and General Manager, Security Business Unit at Sumo Logic. “By combining SIEM, UEBA, SOAR, and log analytics with comprehensive observability capabilities in an integrated platform, we’re enabling seamless collaboration across the DevOps, application, and security teams which all play essential roles in modern defense.”

Acknowledges one early adopter, “Sumo Logic gives us the opportunity to accelerate and expand growth and adoption of behavioral analytics across our organization. With the number of potential unknown threats to investigate, it is easier for us to make confident, data-driven decisions quickly,” said Brandon Hess, a Security Architect with deep experience in both the financial and professional services sectors.

Here are the new benefits:

• Native UEBA Threat Detection for Greater Transparency, Increased Flexibility:  Previous generations of UEBA anomaly detection have been plagued by problems with false positives, complexity and tuning limitations. Sumo Logic Cloud SIEM addresses these challenges with new UEBA capabilities delivering transparent, configurable, tunable detection and base-lining -- fully integrated with all other detection tools. With this distinct advantage, Sumo Logic preserves the benefits of identifying unknown threats, insider threats, and user/entity profiling without the drawbacks of previous industry UEBA solutions. Extending its heritage as a leader in log analytics, Sumo Logic takes UEBA one step further to address new classes of use cases in application security and observability.
• Efficient Automation and Enrichment from Cloud SOAR: Current SIEM offerings have difficulty contextualizing real threats and security analysts must pivot to other tools -- threat intelligence, DDOS, malware, lateral movement or phishing, and a plethora of other enrichment capabilities -- to deal with the huge volume and wide variety of alerts generated. Delivering automation at cloud scale, Sumo Logic introduces Cloud SIEM Automation Service, a marriage of Cloud SOAR with Cloud SIEM. Today, security analysts can more efficiently automate the data from alerts, telemetry and enrichment.
• ML-Powered Detection & Investigation: Built to help security engineers and security analysts tune threat detection logic to minimize false positives and boost true positives, Sumo Logic introduces Cloud SIEM Insight Trainer. Insight Trainer applies ML to understand patterns in the data and automatically suggests detection logic severity and tuning adjustments. When recommendations are applied on a regular basis, Sumo Logic Cloud SIEM enables SOC teams to focus attention on true indicators of compromise. As a result, overall security posture is improved with high-fidelity signals. To accelerate security investigations, Sumo Logic introduces its integration of ChatGPT with its powerful automation and orchestration solution, Cloud SOAR. With this integration, security analysts can quickly identify best practices within documented incident management framework with SOAR investigation workflows.
  

With these additions, Sumo Logic is a leading SaaS platform delivering the flexibility, speed, and agility to innovate without jeopardizing security and control. Sumo Logic will demonstrate these capabilities from Booth #5151 in the North Hall at the RSA Conference.

More Reading:
Solution Brief: Sumo Logic Cloud SIEM
Blog: How using Cloud SIEM dashboards and metrics for daily standups improves SOC efficiency
Blog: ChatGPT praise and trepidation - cyber defense in the age of AI

About Sumo Logic
Sumo Logic, Inc. (NASDAQ: SUMO) empowers the people who power modern, digital business. Through its SaaS analytics platform, Sumo Logic enables customers to deliver reliable and secure cloud-native applications. The Sumo Logic Continuous Intelligence Platform™ helps practitioners and developers ensure application reliability, secure and protect against modern security threats, and gain insights into their cloud infrastructures. Customers around the world rely on Sumo Logic to get powerful real-time analytics and insights across observability and security solutions for their cloud-native applications. For more information, visit www.sumologic.com.

Sumo Logic is a trademark or registered trademark of Sumo Logic in the United States and in foreign countries. All other company and product names may be trademarks or registered trademarks of their respective owners.

Any information regarding offerings, updates, functionality, or other modifications, including release dates, is subject to change without notice. The development, release, and timing of any offering, update, functionality, or modification described herein remains at the sole discretion of Sumo Logic, and should not be relied upon in making a purchase decision, nor as a representation, warranty, or commitment to deliver specific offerings, updates, functionalities, or modifications in the future.

Media Contacts
Carmen Harris, Sumo Logic
charris@sumologic.com

Jenna Shikoff, RH Strategic
SumoLogicPR@RHStrategic.com

Photos accompanying this announcement are available at:
https://www.globenewswire.com/NewsRoom/AttachmentNg/92757e6f-0dbf-4dce-9ebc-5d3672886e1b

https://www.globenewswire.com/NewsRoom/AttachmentNg/e1bde8b0-68b1-4513-8cf6-be680eee647d

FAQ

What innovations did Sumo Logic announce at the RSA Conference on April 25, 2023?

Sumo Logic announced new features including native UEBA threat detection, Cloud SIEM Automation Service, and ML-powered Insight Trainer.

How does Sumo Logic's Cloud SIEM Automation Service benefit security analysts?

It improves the automation of threat data management, allowing analysts to handle alerts more efficiently.

What role does ChatGPT play in Sumo Logic's latest offerings?

The integration of ChatGPT helps security analysts speed up investigations and enhance workflow efficiency.

What is the impact of the new ML-powered Insight Trainer by Sumo Logic?

The Insight Trainer minimizes false positives and boosts the accuracy of threat detection logic.

What challenges does Sumo Logic aim to address with its new UEBA capabilities?

It targets previous UEBA limitations such as false positives, complexity, and tuning issues.