诚邀您参加卡巴斯基于 5 月 15 日上午 9:00(北京时间)举行的新一代 SOC 在线研讨会,本次会议主题为“情报驱动的实战应用”。在瞬息万变的网络威胁环境中,安全运营中心(SOC)的高效与智能至关重要。本次网络研讨会将深入探讨威胁情报如何助力新一代 SOC,实现精准检测、缓解并消除网络威胁。通过利用实时数据、预测分析技术以及集成工具,SOC 团队可从被动防御转变为主动安全运营。
Nikita Nazarov
Head of Threat Exploration
Kaspersky
This presentation will introduce the Next-Generation TIP based on MITRE ATT&CK connections. The new approach is based on Kaspersky Lab's streaming telemetry, which allows to receive hundreds of thousands of fresh TTPs daily and monitor fresh data about adversaries.
Nikita Nazarov
Head of Threat Exploration
Kaspersky
本次演讲将聚焦基于 MITRE ATT&CK 关联的下一代威胁情报平台 (TIP)。这一全新解决方案依托卡巴斯基实验室的流式遥测技术,每日可接收数十万条最新战术、技术、程序 (TTP),并实时监控对手的更新数据。
Nikita Nazarov
Head of Threat Exploration
Kaspersky
Kenny Yeo
Director, Global Security Advisor and Head of Asia Pacific Cyber Security Practice
Frost & Sullivan
In this keynote address, we will explore the progression of artificial intelligence on business transformation today, and its impact on cyber security strategy. As AI continues to revolutionize various industries with new business capabilities, it simultaneously introduces new challenges for cyber defense. This analyst session will delve into the latest trends in AI transformation and their implications for cyber security strategies involving protection, detection and response.
Kenny Yeo
Director, Global Security Advisor and Head of Asia Pacific Cyber Security Practice
Frost & Sullivan
在本次主题演讲中,我们将探讨人工智能在当下推动业务转型的进程,以及其对网络安全策略产生的影响。AI 技术的持续创新正引领各行各业发生变革,同时也为网络防御带来了全新挑战。本次分析师会议将深入探讨 AI 转型的最新趋势,以及这些趋势对涉及防护、检测和响应的网络安全策略的影响。
Kenny Yeo
Director, Global Security Advisor and Head of Asia Pacific Cyber Security Practice
Frost & Sullivan
Veniamin Levtsov
Vice-President, Director of Center of Expertise
Kaspersky
Find out how a range of solutions can protect various elements of IT infrastructure from regular to advance threats. A platform for Security Operations Management, Cyber Threat Intelligence in different formats, integrated solutions for protecting OT segment, security assessment and consulting services, and many others.
Veniamin Levtsov
Vice-President, Director of Center of Expertise
Kaspersky
了解一系列卡巴斯基解决方案如何保护 IT 基础设施的各个要素,抵御从常规到高级的各类威胁。其中包括安全运营管理平台、多种格式的网络威胁情报、用于保护 OT 领域的集成解决方案、安全评估和咨询服务等。
Sergey Soldatov
Head of Security Operations Center
Kaspersky
Global SOC incident statistics reflect the threat landscape around the world. We will analyze interesting observations from 2024 incident statistics and make a forecast for threats in 2025.
Sergey Soldatov
Head of Security Operations Center
Kaspersky
全球 SOC 事件统计数据反映了世界各地的威胁态势。我们将分析 2024 年事件统计数据中的有趣发现,并对 2025 年的威胁走向进行预测。
Roman Dushkov
Head of International Business Development
Security Vision
Cybersecurity teams are overwhelmed. Every day brings a flood of alerts, forcing analysts to react to threats instead of anticipating them. But what if we could break free from this endless firefighting cycle? What if security operations could be smarter, more efficient, and more strategic?
We’ll explore how SOAR (Security Orchestration, Automation, and Response) helps organizations shift from reactive incident response to a proactive security strategy:
- Why constant firefighting is unsustainable and leads to analyst burnout.
- How automation and orchestration free up security teams for high-value tasks.
- How a strategic, big-picture approach improves threat detection and response.
- Real-world examples of organizations transforming their SOC with SOAR.
The future of cybersecurity isn’t about reacting faster and not needing to react at all, it's about effective team work, helicopter view and modern tools
Roman Dushkov
Head of International Business Development
Security Vision
网络安全团队因每日疲于应对海量预警而不堪重负,分析师陷入被动应急状态,无暇主动防范。然而,若能摆脱这种无休止的应急循环,让安全运营更智能、更高效、更具战略性,又将如何?
我们将探讨 SOAR (安全编排、自动化与响应)如何帮助各机构从被动的事件响应转变为主动的安全防范战略:
- 为何持续的应急处理不可取,易使分析师疲惫不堪
- 自动化与编排如何为安全团队减负,使其专注高价值任务
- 战略性全局视角下,如何提升威胁检测与应对能力
- 借助 SOAR 实现 SOC 转型的机构实际案例
网络安全的未来,不在于更快应对,甚至无需应对,而在于高效的团队协作、全局化视野以及现代化工具的应用。
Kenny Yeo (Moderator)
Director, Global Security Advisor and Head of Asia Pacific Cyber Security Practice
Frost & Sullivan
Sergey Soldatov
Head of Security Operations Center
Kaspersky
Anilkumar Nair
Head IT and Cyber Security
Kotak Securities
Igor Balakshev
Deputy Chief Information Security Officer
Norilsk Nickel
Ekaterina Chernyshova
Head of Group Key Account Manager
Security Vision
Oleg Masliakov
Information Security Advisor
Siberian Generating Company
In this interactive panel discussion, industry experts will share innovative approaches to threat intelligence and proactive cybersecurity based on real world experience. This multi-faceted panel - with a mix of end-user, industry analyst, partner and technical expertise - has been formed to provide attendees with practical strategies to achieve proactive cyber security.
专题讨论
超越边界防护:借助威胁情报实现主动网络安全的有效策略
Kenny Yeo (Moderator)
Director, Global Security Advisor and Head of Asia Pacific Cyber Security Practice
Frost & Sullivan
Sergey Soldatov
Head of Security Operations Center
Kaspersky
Anilkumar Nair
Head IT and Cyber Security
Kotak Securities
Igor Balakshev
Deputy Chief Information Security Officer
Norilsk Nickel
Ekaterina Chernyshova
Head of Group Key Account Manager
Security Vision
Oleg Masliakov
Information Security Advisor
Siberian Generating Company
在本次专题讨论中,行业专家将根据实际经验分享威胁情报和主动网络安全的创新方法。专题讨论小组将由最终用户、行业分析师、合作伙伴和技术专家组成,旨在为与会者提供实现主动网络安全的实用策略。
Narayan Gokhale
Vice President & Principal Analyst - Research & User Consulting
QKS Group
Sofia Ali
Associate Director and Principal Analyst
QKS Group
As the threat landscape continues to evolve in complexity and scale, Chief Information Security Officers (CISOs) are re-evaluating their Security Operations Center (SOC) strategies to stay ahead of advanced cyber threats. This topic explores the top priorities driving SOC investments and innovations from a CISO’s perspective, including the growing emphasis on AI-driven threat detection, SOAR integration, cloud-native security, and proactive threat hunting. It also highlights the increasing need for unified visibility, automation to mitigate talent shortages, and outcome-based security metrics. The study provides actionable insights into how CISOs are balancing technology, talent, and process improvements to build resilient, agile, and intelligence-driven SOCs.
Narayan Gokhale
Vice President & Principal Analyst - Research & User Consulting
QKS Group
Sofia Ali
Associate Director and Principal Analyst
QKS Group
随着威胁形势在复杂程度和规模上的持续演变,首席信息安全官 (CISO) 正重新审视其安全运营中心 (SOC) 战略,力求在高级网络威胁面前抢占先机。本专题站在 CISO 的视角,剖析了推动 SOC 投资与创新的首要任务,涵盖对 AI 驱动威胁检测、SOAR 集成、云原生安全以及主动威胁搜寻的日益重视。同时,也着重指出了对统一可见性、缓解人才短缺的自动化手段以及基于成果的安全指标的迫切需求。该研究提供了切实可行的思路见解,助力 CISO 在技术、人才和流程之间找到平衡,打造具备韧性、敏捷性与智能驱动特性的 SOC。
Vladislav Tushkanov
AI Research Development Group Manager
Kaspersky
AI is the new tool in our toolbox—and in adversaries’ arsenal alike. From supply chain attacks on machine learning engineers to risks of agentic AI, this new technology forms a threat landscape of its own. In this talk, we will look into today’s most pressing threats, as well as the risks of the systems to come.
Vladislav Tushkanov
AI Research Development Group Manager
Kaspersky
AI 已成为我们与对手工具箱中的新锐武器。从针对机器学习工程师发起的供应链攻击,到代理式 AI 所衍生的风险,这项新技术正构筑起独有的威胁态势。在本专题中,我们将探讨当今最为棘手的威胁,以及未来系统可能面临的风险。
Igor Balakshev
Deputy Chief Information Security Officer
Norilsk Nickel
This presentation will explore how metallurgical enterprises can modernize their security architecture by integrating SOC processes into existing infrastructure without disrupting production processes. It will address the unique challenges of industrial networks, including complex regulations and the priority of stability over cybersecurity. Additionally, it will demonstrate how asset inventory, anomaly detection, and basic security measures can provide adequate security without implementing a Zero Trust concept.
Igor Balakshev
Deputy Chief Information Security Officer
Norilsk Nickel
本专题将聚焦冶金企业,探讨如何通过将 SOC 流程整合到现有基础设施中,实现安全架构的现代化升级,同时确保生产流程不受影响。演讲将剖析工业网络面临的独特挑战,如复杂的法规要求,以及生产稳定性凌驾于网络安全之上的现实状况。此外,还将展示资产清单梳理、异常检测机制以及基础安全措施,如何在不实施零信任理念的前提下,为冶金企业提供充分的安全保障。
Damir Shaykhelislamov
Advanced Threat Protection Solutions Group Manager
Kaspersky
The practical use case demonstrating how Kaspersky SOC technologies work together to improve incident handling and how CTI supports better decision-making in cybersecurity operations.
Damir Shaykhelislamov
Advanced Threat Protection Solutions Group Manager
Kaspersky
实际案例将展示卡巴斯基 SOC 技术如何协同工作,优化事件处理流程,以及网络威胁情报 (CTI) 如何为网络安全运营决策提供更有力支持。
Ekaterina Chernyshova
Head of Group Key Account Manager
Security Vision
In today’s rapidly evolving cybersecurity landscape, organizations face an ever-growing array of threats, making vulnerability management a cornerstone of any effective security strategy. This presentation will introduce Security Vision Next Generation VM - a comprehensive vulnerability management solution that serves as an integral component of the NG SOC ecosystem. We will explore how this innovative product helps organizations anticipate and block attacks before they happen, giving them better control over their risks
Ekaterina Chernyshova
Head of Group Key Account Manager
Security Vision
在如今瞬息万变的网络安全环境里,各机构所面临的威胁与日俱增,漏洞管理已然成为任何一种行之有效的安全策略的基石。本专题将介绍 Security Vision 下一代漏洞管理 (VM) ——这是一款全方位的漏洞管理解决方案,亦是新一代 SOC 生态系统的重要组成部分。我们将深入探讨这款创新解决方案如何助力机构在攻击尚未发生时便精准预测并有效阻止,进而实现更卓越的风险管控。
Ekaterina Chernyshova
Head of Group Key Account Manager
Security Vision
VP International Corporate Sales
Kaspersky
Managing Director, APAC
Kaspersky
Director, Global Security Advisor and Head of Asia Pacific Cyber Security Practice
Frost & Sullivan
Vice-President, Director of Center of Expertise
Kaspersky
Head of Threat Exploration
Kaspersky
Head of Security Operations Center
Kaspersky
Advanced Threat Protection Solutions Group Manager
Kaspersky
AI Research Development Group Manager
Kaspersky
Head IT and Cyber Security
Kotak Securities
Deputy Chief Information Security Officer
Norilsk Nickel
Information Security Advisor
Siberian Generating Company
Vice President & Principal Analyst - Research & User Consulting
QKS Group
Associate Director and Principal Analyst
QKS Group
Head of International Business Development
Security Vision
Head of Group Key Account Manager
Security Vision
本次活动专为网络安全领袖、分析师和专业人士打造,旨在提供对情报驱动安全战略的深刻洞察与实战分享。由于席位有限,建议您尽早注册,把握报名机会。
期待在本次活动中与您见面,共同探索新一代 SOC 的安全未来。
支持中文、韩语和越南语翻译