RSEM
Security Event analysis and management is an uphill task that poses serious questions to the security infrastructure of any organisation. With intelligent hackers and sophisticated network attack patterns, seemingly mundane and harmless events can also culminate into vociferous attacks. RSEM provides effective event management and protects an organisation's assets from DDoS, bots, attackers/hackers, etc. The most important advantage of having RSEM to achieve event management is that it performs event management in real time and with the aid of its global CNAM engine it assimilates and distributes all the important security feeds and information. It thus keeps the security analyst of an organisation updated about the latest attacks and attack patterns and provides an important time leverage to mitigate the attacks in real time.
NetMonastery’s real time security event management module utilizes its advanced filters, multiple layered correlation modules and continuously updated intelligence feeds to analyse, interpret and correlate the logs obtained from an organization’s/enterprise’s assets and identifies any and every threat or attack in real time.
RSEM at a glance
- Advanced correlation logic filters that identify and mitigate threats in real time.
- Continuous update of global security intelligence feeds to keep abreast of all the latest threats, bots and attacks happening elsewhere in the world.
- Highly evolved threat management system that identifies any deviations in the traffic patterns, collaborates information and expedites mitigation by detecting an attack in real time.
- False positive reduction processes that facilitate smooth operations in an organisation
Quick Reference
Resources
Cyber Security Watchout 2010
A presentation titled GhostNet, Zeus, SpyEye find them, kill them