Nous avons le plaisir de vous annoncer qu'Elastic et Amazon ont résolu le contentieux soulevé à propos de la marque de commerce Elasticsearch. Désormais, le seul service Elasticsearch proposé par AWS et AWS Marketplace est Elastic Cloud.

announcement-elastic-aws-blog-1680x980.png

Elastic and Amazon Reach Agreement on Trademark Infringement Lawsuit

Elastic et Amazon trouvent un accord dans le cadre du contentieux soulevé pour violation de marque commerciale

Elastic is joining forces with Cmd to accelerate our efforts in Cloud security - specifically in cloud workload runtime security.

We are excited to announce that Elastic is joining forces with Cmd to accelerate our efforts in Cloud security - specifically in cloud workload runtime security. By integrating the capabilities of Cmd's expertise and product into Elastic Security, we will enable customers to detect, prevent, and respond to attacks on their cloud workloads. Adding to our <a href="https://www.elastic.co/blog/elastic-and-build-security-shifting-left-together-to-secure-the-cloud">recent announcement</a> to acquire build.security, this will give customers cloud security protections from build-time, to deployment-time, to runtime.Cmd is a leader in infrastructure detection and response (IDR), providing deep and performant visibility into cloud workloads using extended Berkeley Packet Filter (<a href="https://ebpf.io/">eBPF</a>) technology and performing expert detection and prevention on cloud-native data. eBPF has revolutionized how organizations observe and protect cloud workloads. By safely and efficiently running sandboxed programs in the Linux kernel, developers can rapidly innovate and deliver entirely new Observability and Security outcomes to users. This combination is a reflection of our commitment to eBPF and such technologies that enable users to observe and protect modern cloud-native systems in the most frictionless way possible.Cmd also aligns with Elastic's commitment to delighting the developer and practitioner community. The Cmd product embraces a developer-first approach, delivering experiences that all practitioners, from developers to operations, DevOps, site reliability engineers, and security experts can embrace. We are excited to expand Elastic's portfolio with a shared passion for this community.Since its inception, Elastic Security has had a clear mission: to protect the world's data and systems from attack. The world's infrastructure is shifting to the cloud, and with this, the need for cloud <a href="https://cmd.com/wp-content/uploads/2021/07/State-of-Digital-Transformation-Infographic.png">security</a> is ever increasing. According to the <a href="https://www.redhat.com/rhdc/managed-files/cl-state-kubernetes-security-report-ebook-f29117-202106-en.pdf">2021 State of Kubernetes Security report</a>, 94% of organizations admitted to experiencing a security incident involving their Kubernetes or other container environments in the past 12 months, and 55% of organizations reported that security incidents delayed their applications' deployment into production.<h2>Completing the cloud security vision</h2>Only recently, we <a href="https://www.elastic.co/blog/elastic-and-build-security-shifting-left-together-to-secure-the-cloud">announced</a> that we are joining forces with build.security to address the needs of continuous cloud-native security, using Open Policy Agent (OPA) to ensure that cloud environments are secure to the policies defined by the business, both at deployment-time and in the future at build-time. By joining forces with Cmd, we are taking a significant step toward fulfilling this vision, and addressing the need for workload runtime security.<img src="https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/bltcce085c705df3256/6126a3c7cc95cf70fa044a10/diagram-cloud-security-workload.png" data-sys-asset-uid="bltcce085c705df3256" alt="diagram-cloud-security-workload.png"/>We asked co-founder and Chief Security Officer of Cmd, Jake King, to give some background on the company in his own words:<blockquote>"Cmd was born out of <a href="https://www.expa.com/">Expa</a> and matured as the brainchild of discussions between Expa General Partner Milun Tesovic and me. Milun and I focused on solving the challenges of addressing Linux observability and security challenges in an efficient way that doesn't bog down production servers and can grow to enterprise scale. The growing need for IDR is clear. The volume and sophistication of attacks in the cloud continue to rise, and over 90% of this critical infrastructure runs on Linux. Attackers can quickly gain shell access and use native Linux tools to conduct reconnaissance and move laterally from machine to machine. Unfortunately, most security solutions fail to provide visibility and detection for these Linux-specific adversarial techniques. Security teams need detailed and precise Linux telemetry, so they can investigate and respond to these threats quickly and effectively. As sophisticated adversaries gain further traction within cloud ecosystems and the circumvention of traditional Linux sensor technologies grows, eBPF-based technology has become a cornerstone of efficient, safe, and all-encompassing observability for Linux. Cmd has been a leader in eBPF-based security detection, with specific technology aligned with native system process execution and live session observability. Combining this powerful agent-based technology with the incredible capabilities of the Elastic platform will bring customers unprecedented capabilities for powerful threat detection and prevention while maintaining system performance." </blockquote>Elastic Security already includes EDR-style kernel-level visibility into Linux systems, as well as powerful Linux protection capabilities like malware prevention, numerous MITRE ATT&amp;CK-mapped advanced Linux rules, and even upcoming features like host isolation of Linux hosts. With the technology and expertise we gain through this teaming with Cmd, we will be able to expand our security capabilities even further for cloud-native application workloads, all implemented using the frictionless approach made possible with eBPF.<h2>The plan</h2>We believe in the force multiplier effect that comes from joining with focused, innovative teams like Cmd. Our intent is to start by working together to integrate Cmd's cloud-native data collection using eBPF directly into Elastic Agent. In parallel, we will integrate Cmd's innovative and practioner-orientated user experience and workflows directly into Kibana. The Cmd team has built many differentiated workflows for DevSecOps users, like the Cmd Session view, that we are excited to integrate into Kibana and make available for all users and use cases.We are excited that both, existing Elastic customers, as well as existing Cmd customers will benefit from this integration. Existing Elastic customers will get all the cloud-native security capabilities that CMD has built over the past few years. Existing Cmd customers will also benefit from this work because they will be able to take advantage of this more comprehensive, integrated product once the integration is complete.<img src="https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/blt372cb60cea85f6a4/6126966bcc95cf70fa0449a5/dashboard-user-experience-workflow-cmd.jpg" data-sys-asset-uid="blt372cb60cea85f6a4" alt="dashboard-user-experience-workflow-cmd.jpg"/>But this is just the beginning. We asked Cmd CEO Santosh Krishnan to discuss his views on the future of Limitless XDR with IDR capabilities. In his own words -<blockquote>"We are incredibly excited to join forces with Elastic Security to bring comprehensive cloud runtime security to our customers. Any robust cloud security program starts with a strong analytics foundation - an area in which Elastic Security is a proven leader. Together, we will deliver intuitive investigative workflows on top of that foundation, along with preventive controls, detection and response, to enable customers to quickly find attacks and stop them in their tracks. We look forward to being part of the Elastic team and making this vision a reality."</blockquote><h2>Continuing to add to the value of resource-based pricing</h2>In 2019, when Elastic joined forces with Endgame we dramatically changed how client endpoint security is priced by removing per-endpoint pricing. We are excited to continue this disruption by adding cloud workloads to the definition of "endpoint".Two years ago, our founder and CEO, <a href="https://www.elastic.co/blog/introducing-elastic-endpoint-security">Shay Banon said</a>, "Why should users have to count the number of devices they need to protect? Or choose how many days of threat intelligence data they can afford to retain? We want organizations to have the best protection, use it everywhere, and not be penalized with per-endpoint pricing."This message resonates even more strongly today with the rapid expansion of containers, pods, virtual instances, and other cloud infrastructure.Elastic customers pay for resource capacity utilized for any solution they use — Elastic Logs, APM, SIEM, App Search, Site Search, Enterprise Search, and now expanded cloud-native security — with a consistent and transparent pricing framework. This simple pricing model ensures that organizations can capture every bit of value from their data.With Elastic Security, customers get full protection for as many endpoints as they need, and full data collection and shipping without having to compromise.<h2>In summary</h2>Limitless XDR continues to become...well... even more limitless. First by joining forces with build.security, and now with Cmd, we are making major advances in our <a href="https://www.elastic.co/observability/cloud-native" target="_self">cloud-native observability</a> and security capabilities by investing in innovative teams that have built differentiated capabilities leveraging open technologies like OPA and eBPF. Elastic users will see these capabilities added over time into the architecture they already deploy today using the power of the Elastic Stack and Elastic Agent. And, Cmd users will now get access to leading XDR capabilities, including hundreds of stateful detections and machine learning models mapped to MITRE ATT&amp;CK, built-in case workflow, client security on Windows and macOS, and anti-malware prevention on Linux, plus the full breadth of what Elastic has to offer.Follow us at <a href="/security">https://www.elastic.co/security</a> to continue to watch the evolution of Limitless XDR.###<h3>Forward-Looking Statements</h3>This blog post contains forward-looking statements which include but are not limited to statements about future features and functionality. The release and timing of any features or functionality described in this document remain at Elastic's sole discretion. Any features or functionality not currently available may not be delivered on time or at all.

banner-elastic-cmd.png

thumbnail-elastic-cmd.png

Elastic and Cmd join forces to help you take command of your cloud workloads

By integrating build.security's technology into Elastic Security over the coming months, our customers will be able to continuously monitor and ensure that their cloud environment is secure to the policies they have put in place.

Since its inception, Elastic Security has had a clear mission: to protect the world's data and systems from attack.
We started with SIEM, built on top of the Elastic Stack, applying its fast and scalable search capabilities to detect security vulnerabilities across all threat vectors. Next, we joined forces with Endgame to integrate endpoint security into Elastic Security, and allow customers to prevent, detect, and respond to attacks from a single, unified platform. With the recent release of <a href="/blog/introducing-limitless-xdr">Elastic Security Limitless XDR</a> and the general availability of Elastic Agent, we furthered our mission.
Today, we are excited to announce the next step in the Elastic Security journey: to extend security enforcement from every endpoint to every cloud workload.
Millions of users trust Elastic for observability of their critical business applications. Elastic is deployed across hundreds of thousands of cloud-native workloads for logging, metrics, and application performance monitoring. In addition, Elastic Security includes powerful detections against cloud-native threats, like our machine learning models to detect attacks against the AWS metadata service.
We are now taking this one step further. We are excited to join forces with build.security, based out of Tel Aviv, Israel, to move toward cloud security enforcement — the ability to enforce security actions for cloud native environments — on hosts, virtual machines, and containers orchestrated by Kubernetes.
The small but mighty team at build.security has created a policy definition and enforcement platform leveraging the open source standard Open Policy Agent (OPA) to allow organizations to hook into cloud-native infrastructure components like Kubernetes and enforce policies in real time. Leveraging simple user experience on top of OPA, build.security delivers policy management and enforcement across cloud-native environments and platforms like Kubernetes and Istio.
By integrating build.security's technology into Elastic Security over the coming months, our customers will be able to continuously monitor and ensure that their cloud environment is secure to the policies they have put in place, as well as validate their security posture against well established standards like CIS benchmarks. They will be able to ensure that their Kubernetes configurations are secure, that they are using approved container images, and much more.
<h3>Cloud security defined</h3>At Elastic, we think of cloud security as including both detection of cloud-native threats, and enforcement of security actions on cloud-native infrastructure. Cloud security enables customers to answer two key questions:
<ul>
	<li>Is my cloud environment secure in accordance with the policies I've put in place? This is continuous cloud-native security.
	</li>
	<li>Is someone attempting to violate my security policies, and how do I prevent it? This is workload runtime security.</li>
</ul><img src="https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/blt911b96a4b7769a95/612370db4d39656a33b07adb/diagram-cloud-security.jpg" data-sys-asset-uid="blt911b96a4b7769a95" alt="diagram-cloud-security.jpg">
<h3>Continuous cloud-native security</h3>Core to cloud-native security is ensuring all environments are built and maintained to the policies you define. This configuration and change management is critical in cloud computing, since new environments are created constantly and by numerous different teams in an organization. Whether it is a bespoke policy the organization has created, or a defined set of policies such as from CIS benchmarks, or a combination of the two, a capable cloud security offering needs to provide a simple way to enforce compliance to these policies. This is the area that build.security specializes in, and the focus of the work that we will do together.
<h3>Open Policy Agent (OPA)</h3>We believe that data, policy, and policy management is at the heart of ensuring continuous cloud-native security. By joining forces with build.security, we are reinforcing our fundamental belief in policy as a cornerstone of security, and our shared conviction in the power of the de-facto standard for policy authoring and enforcement: CNCF's <a href="https://github.com/open-policy-agent/opa">Open Policy Agent (OPA)</a>.
From the GitHub readme:
<blockquote>The Open Policy Agent (OPA) is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack.
</blockquote>OPA is hosted by the Cloud Native Computing Foundation (CNCF) as a graduated project.
Using Rego, which is the policy language used to define OPA policies, companies can more easily articulate, and more importantly, collaborate, on common build time, deployment time, and runtime cloud native practices. Furthermore, being able to share them with a community can go a long way toward making all of us better. We've seen this first hand with the open detection repository for Elastic Security, with the community contributing dozens of new rules with our latest <a href="https://github.com/elastic/detection-rules">update</a>. In time, we anticipate being able to invest in and contribute to the future of OPA as this standard continues to gain even more momentum amongst users.
<h3>The road ahead
</h3>We believe in the force multiplier effect that comes from joining forces with focused, innovative teams like build.security. Our intent is to start by working together with <a href="https://www.linkedin.com/in/amitkanfer/">Amit Kanfer</a>, the co-founder and CEO of build.security, and his team, to integrate OPA into Elastic Agent, as well as to build the ability to manage OPA policies directly in Kibana, and store the results of OPA policy executions within Elasticsearch using the Elastic Common Schema (ECS).
Starting with Kubernetes admission controller, Elastic will continue to add policy capabilities on all stages of the development pipeline, from code to cloud to runtime, ensuring compliance, mitigating risk and reducing human error — all on top of our existing observability stack.
But this is just the beginning. We asked Amit to co-author this blog and discuss his views on the future of policy and OPA for security. In his own words:
"Think of a platform that hooks into your git repository and enforces compliance and security checks at build time, blocking PRs from getting merged if they violate policy. That same platform attesting all security checks within the CI/CD pipeline (e.g., image scanning and verification), connecting to Jenkins and CircleCI, and through Kubernetes admission controllers in the cloud, preventing supply chain attacks. Potentially, being able to augment runtime workload protection when integrated with eBPF. All of these can be achieved by leveraging Open Policy Agent.
Now imagine all of that in Kibana, seamlessly integrated into Elastic Security and interoperable with Elastic Observability. How cool would that be?
Most software companies spend a ton of time justifying why they need a seat at the table. Elastic already has a seat at the table. We're excited to join forces with Elastic and accelerate our ability to deliver the promise of a free and open policy management platform for cloud native environments, starting with Kubernetes admission controller security and then expanding from design to deployment to production, from code to cloud to runtime."
<h3>Building a center of excellence in Israel
</h3>An additional benefit of joining forces with build.security is to cement a presence in the tech center of Tel Aviv. The entrepreneurial spirit is strong in Israel, with constant security innovations that have the potential to significantly improve the security experience. While Elastic remains a distributed company by design, with around a dozen employees already in Israel, the build.security team will be the foundation of our future growth in the region, and Amit will assume the role of site lead for our efforts there. We are excited about what we will be able to achieve together — we are just getting started!
Build.security was seeded by <a href="https://www.ylventures.com/">YL Ventures</a>, a leading cybersecurity-focused venture capital firm headquartered in Silicon Valley.
To learn more about recent developments in Elastic Security, check out our latest <a href="/blog/whats-new-elastic-security-7-14-0">7.14 security release</a>, and join us for our upcoming user Conference, <a href="/elasticon/global">ElasticON Global</a>, Oct 5-7, 2021.
###<h4>Forward-Looking Statements</h4>This blog post contains forward-looking statements which include but are not limited to statements about future features and functionality. The release and timing of any features or functionality described in this document remain at Elastic's sole discretion. Any features or functionality not currently available may not be delivered on time or at all.

banner-elastic-build-security.png

thumbnail-elastic-build-security.png

Elastic and build.security: Shifting left together to secure the cloud

Start free trial

Blog Footer CTA

Sign up for Elastic Cloud free trial

headshot-ashutosh-kulkarni-300x300.jpg

Chief Product Officer

Ashutosh Kulkarni

By submitting you acknowledge that you've read and agree to our <a href="/legal/elastic-cloud-account-terms" target="_self">Terms of Service</a>, and you agree to receive the <a href="/legal/privacy-statement#how-we-use-the-information" target="_self">selected communications</a> at the contact details you provided above. See <a href="/legal/privacy-statement/" target="_self">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.

Communication Preferences - ONLY for /communication-preferences

En confirmant votre envoi, vous reconnaissez que vous avez lu et que vous acceptez nos <a href="/fr/legal/elastic-cloud-account-terms" target="_self">Conditions générales d'utilisation</a>, et vous acceptez de recevoir les <a href="/fr/legal/privacy-statement#how-we-use-the-information" target="_self">types de notification sélectionnés</a> à l'adresse que vous avez fournie plus haut. Pour en savoir plus ou pour revenir sur votre décision (possible à tout moment), consultez la <a href="/fr/legal/privacy-statement/" target="_self">Déclaration de confidentialité d'Elastic</a>.

By submitting you acknowledge that you've read and agree to our <a href="/legal/elastic-cloud-account-terms" target="_blank">Terms of Service</a>, and that Elastic may <a href="/legal/privacy-statement#how-we-use-the-information" target="_blank">contact you</a> about our related products and services, using the details you provide above. See <a href="/legal/privacy-statement/" target="_blank">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.By submitting this form, I agree to Elastic sharing my contact information with Google Cloud. I also agree to Elastic giving my information to the vendor for the purpose of shipping my food package.

GDPR Text + Google Cloud

By submitting you acknowledge that you've read and agree to our <a href="/legal/serverless-preview-terms" target="_blank">Terms of Service</a>, and that Elastic may <a href="/legal/privacy-statement#how-we-use-the-information" target="_blank">contact you</a> about our related products and services, using the details you provide above. See <a href="/legal/privacy-statement/" target="_blank">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.

Serverless GDPR Text

En confirmant votre envoi, vous reconnaissez que vous avez lu et que vous acceptez nos <a href="/fr/legal/serverless-preview-terms" target="_self">Conditions générales d'utilisation</a>, et vous permettez à Elastic de <a href="/fr/legal/privacy-statement#how-we-use-the-information" target="_self">vous contacter</a> à propos de produits et services similaires en utilisant les informations que vous avez fournies plus haut. Pour en savoir plus ou pour revenir sur votre décision (possible à tout moment), consultez la <a href="/fr/legal/privacy-statement/" target="_self">Déclaration de confidentialité d'Elastic</a>.

By submitting you agree to <a href="/agreements/global/cloud-services-monthly" rel="nofollow">Elastic Cloud Terms of Service</a>. Your personal data will be processed in accordance with <a href="/legal/privacy-statement">Elastic's Privacy Statement</a>.

Cloud Trial GDPR Text

En envoyant votre demande d'inscription, vous acceptez les <a href="/fr/agreements/global/cloud-services-monthly" rel="nofollow">conditions générales d'utilisation d'Elastic Cloud</a>. Vos données personnelles seront traitées conformément à la <a href="/fr/legal/privacy-statement">déclaration de confidentialité d'Elastic</a>.

By submitting you acknowledge that you've read and agree to our <a href="/legal/terms-of-use" target="_blank">Terms of Service</a>, and that Elastic may <a href="/legal/privacy-statement#how-we-use-the-information" target="_blank">contact you</a> about our related products and services, using the details you provide above. See <a href="/legal/privacy-statement/" target="_blank">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.

Newsletter GDPR Text

En confirmant votre envoi, vous reconnaissez que vous avez lu et que vous acceptez nos <a href="/fr/legal/terms-of-use" target="_self">Conditions générales d'utilisation</a>, et vous permettez à Elastic de <a href="/fr/legal/privacy-statement#how-we-use-the-information" target="_self">vous contacter</a> à propos de produits et services similaires en utilisant les informations que vous avez fournies plus haut. Pour en savoir plus ou pour revenir sur votre décision (possible à tout moment), consultez la <a href="/fr/legal/privacy-statement/" target="_self">Déclaration de confidentialité d'Elastic</a>.

Explore similar demos

Overview

You'll also receive an email with related content.

You'll also receive an email with related content

Nous vous enverrons plus de contenu susceptible de vous intéresser.

Speakers

Close

The content on this page is not available in the selected language. As Elastic grows globally, we continue to support content in multiple languages.

The content on this page is not available in the selected language.

Le contenu de cette page n'est pas disponible dans la langue sélectionnée. Chez Elastic, nous mettons tout en œuvre pour vous proposer du contenu dans différentes langues. En attendant, nous vous remercions de votre patience !

See more insights

Articles by

Author

Learn more

Watch now (no PT)

Watch now

See all top stories

All (no PT translation)

Contact information

Press Release

Share on Reddit

Share this story

Share by Email

Thank you for your interest!

Contact Info

Follow us on Youtube

Load More

Share on LinkedIn

Follow us on LinkedIn

Search Integrations

All Solutions

Video for

Follow us on Twitter

See when this webinar starts in my time zone

Voir à quelle heure débute le webinar dans mon fuseau horaire

Register to Watch

Register now

See All Posts

Can't make it? Register and we'll send you the recording. You'll also receive an email with related content

Si vous ne pouvez pas vous libérer le jour J, inscrivez-vous et nous vous enverrons l'enregistrement. Vous recevrez aussi un e-mail contenant des ressources connexes.

Small image for

On-demand webinar

Featured webinar

Register to Attend

Share on Facebook

Reset all

Upcoming webinar

View more posts

Print

Hosted by

Sign In to Attend

View next

Follow us on Facebook

Share

Highlights

Read less

Thank you for registering. We will send you a confirmation email soon.

Nous vous remercions de votre inscription. Vous allez recevoir un e-mail de confirmation.

Author

Articles by Ashutosh Kulkarni

Chief Product Officer, Elastic

Elastic et Amazon trouvent un accord dans le cadre du contentieux soulevé pour violation de marque commerciale

Elastic and Cmd join forces to help you take command of your cloud workloads

Elastic and build.security: Shifting left together to secure the cloud