Situational awareness platform uses power of big data
Posted on 07 May 2012.
Despite all the promises made by SIEM vendors over the last decade, enterprise security analysts often have no way to know if their IT systems have been compromised by an APT or insider attack.


In the face of more frequent, more prolonged and more advanced attacks, eIQnetworks has developed a platform that gives infrastructure-wide visibility into a large organization’s security posture.

Using the latest release of SecureVue, security information analysts can perform correlation and forensic searches over long time periods. For example, analysts can now receive alerts when a server is the target of a reconnaissance scan, then experiences failed login attempts, and then experiences a configuration change anytime within the next 90 days, even if no security events are present in the system’s log file.

This allows organizations to be more proactive in identifying activity that may be associated with APTs. SecureVue’s multi-data cross-correlation capabilities and next-generation forensic search engine distinguish it as the only solution in the industry that provides true situational awareness.

“With eIQ’s new ForensicVue forensic search engine, included as a standard part of SecureVue, we are able to define a single search across system log, network activity, vulnerability, configuration, compliance and file integrity data with ‘Google-like’ ease and speed,” said Steven M. Brumant, MCP, Security+, Information Security Manager for Old Second National Bank. “Having the ability to quickly search billions of events in a matter of seconds and display correlated data in a single pane of glass allows us to stay ahead of the cyber attacks and meet needs for ad-hoc reporting and investigative analysis. Point security products, including traditional SIEM solutions, fail to give us the visibility or ad-hoc querying capability we need.”





Spotlight

Biggest ever cyber security exercise in Europe is underway

Posted on 30 October 2014.  |  More than 200 organisations and 400 cyber-security professionals from 29 European countries are testing their readiness to counter cyber-attacks in a day-long simulation, organised by the European Network and Information Security Agency (ENISA).


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Fri, Oct 31st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //