A couple of whitepapers about SIEM
Promo In our first visit to the Reg whitepaper library in some time, we took time out to inspect the security pitches. Here is a couple of vendor papers about SIEM (security information and event management) software that we thought deserved a wider airing. Registration is, as per usual, required.
This whitepaper from Accelops, a fast growing Silicon Vallye SIEM start-up, is based on a February 2013 survey of IT security professionals and how their organisations are responding to the cloud.
Unsurprisingly, they are most concerned about BYOD – and equally unsurprisingly, given the publisher, a large proportion is unhappy with their SIEM monitoring tools.
In this paper, McAfee also mainlines on SIEM. The focus here is on managing the security challenge posed by Big Data, but like Accelops the focus is on the shortfalls of traditional SIEM tools.
The paper delivers a neat history lesson on SIEM tools, argues why they are inadequate for today’s needs, and provides a checklist of the core capabilities of an “ideal SIEM system”.