<![CDATA[[SecurityRatty] tag: siem]]> http://securityratty.com/tag/siem Mon, 10 Nov 2008 21:00:00 +0000 iRatty Engine http://blogs.law.harvard.edu/tech/rss <![CDATA[Links for 2008-12-02 [del.icio.us]]]> http://securityratty.com/article/ced4c9798279af16f5e1c222d68826d6 http://securityratty.com/article/ced4c9798279af16f5e1c222d68826d6
  • Tim's take on Information Security and PCI DSS: Beware PCI DSS Compliant solution vendors
  • PCI Blog - Compliance Demystified
  • IBM to start-up: Industry vet responds to recession
  • SIEM Market Narrows with High Tower 's Flameout
    • ]]>     Tue, 02 Dec 2008 21:00:00 +0000 industry vet responds siem market narrows pci dss pci blog information security compliance tim tower ibm Links for 2008-12-02 [del.icio.us]     <![CDATA[Monthly Blog Round-Up November 2008]]> http://securityratty.com/article/1bdd878eaa6b7f3beec3fe92db4f4c7c http://securityratty.com/article/1bdd878eaa6b7f3beec3fe92db4f4c7c As we all know, blogs are a bit "stateless" and a lot of good content gets lost since many people, sadly, only pay attention to what they see today. These monthly round-ups is an attempt to remind people of useful content from the past month! If you are “too busy to read the blogs” (!), at least read these.

    So, here is my next monthly "Security Warrior" blog round-up of top 5 popular posts/topics.

    1. Amazingly, this month by far the #1 post is my “'Blogging from DeepSec 2008 in Vienna.” DeepSec was indeed an awesome conference.
    2. Last month, I said that “SIEM bashing reached a new high.” OMFG. What should I say now? I dunno. In any case, “11 Signs That Your SIEM Is A Dog or "Raffy, You Killed SIM!" is on the top list. BTW, “On Open Source in SIEM and Log Management” is also again on the top list, to much of my amazement.
    3. Again and again, PCI compliance is obviously still all the rage: MUST-DO Logging for PCI? post was again propelled to a place in my monthly Top5 list.
    4. Get a firewall AND a fire extinguisher, now, will ya? Is it too much to ask? :-) The post “On Small Companies and PCI Compliance” is on the Top list.
    5. Shockingly, AGAINx2 :-) this month, the "Top 11 Reasons to Secure and Protect Your Logs" came up as on the Top list.  BTW, see my other logging polls and my other “top 11” lists.

    See you in December. Also see my annual “Top Posts” (2007)

    Possibly related posts / past monthly popular blog round-ups:

     

    Technorati Tags: ,,,
    About me: http://www.chuvakin.org
    ]]>     Tue, 02 Dec 2008 13:24:00 +0000 monthly blog round-up blog blog round-up monthly top top list annual top posts monthly round-ups pci Monthly Blog Round-Up November 2008     <![CDATA[Links for 2008-11-26 [del.icio.us]]]> http://securityratty.com/article/f0356a02e90f2b20cfc323d05698aafb http://securityratty.com/article/f0356a02e90f2b20cfc323d05698aafb
  • Decurity Blog
    SIEM is NOT dead, but if High-Tower’s recent announcement is any indication it certainly will become a thinner herd in the very near future.
    • ]]>     Wed, 26 Nov 2008 21:00:00 +0000 decurity blog siem high-towers recent announcement thinner herd dead future indication Links for 2008-11-26 [del.icio.us]     <![CDATA[SIEM Is Not What Is SIEMs Nowadays...]]> http://securityratty.com/article/b779ea5efa744a1cf0338332b0a8720f http://securityratty.com/article/b779ea5efa744a1cf0338332b0a8720f Aliso Viejo-based High Tower Software, a venture-backed developer of security, compliance, and log management software, has shut down."

    Wonna go into SIEM market, anybody?
    About me: http://www.chuvakin.org
    ]]>     Tue, 25 Nov 2008 12:40:00 +0000 log management software tower software siem market compliance org wonna developer security chuvakin SIEM Is Not What Is SIEMs Nowadays...     <![CDATA[CSI SIEM Summit Slides and Notes]]> http://securityratty.com/article/2b72dfad65c1f793fb21be157bd6733d http://securityratty.com/article/2b72dfad65c1f793fb21be157bd6733d "SIEM Summit" at CSI 35th in DC. Here are my slides from the event; feel free to pick on them :-)


    SIEM: Is It What Is SIEMs? Security Information and Event Management Summit at CSI 35th Conference
    View SlideShare presentation or Upload your own. (tags: security siem)
    About me: http://www.chuvakin.org
    ]]>     Mon, 24 Nov 2008 11:45:00 +0000 siem siem summit csi 35th csi 35th conference event management summit event security siem view slideshare presentation security information CSI SIEM Summit Slides and Notes     <![CDATA[Links for 2008-11-20 [del.icio.us]]]> http://securityratty.com/article/f0421d3d712a177576a6940fd9181128 http://securityratty.com/article/f0421d3d712a177576a6940fd9181128
  • Got SIEM? - Part IV « eIQviews
    Customers tend to use SIEM technologies for more reactive efforts, such as post-event forensics, rather than as a true correlation solution to determine unusual behavior or policy violations before they have a chance to affect systems and data.
  • SIEM Blog » Unrestricted Data Collection for Maximum Compliance and Forensic Visibility
  • Beast Or Buddha » Blog Archive » So we own your client database and everything important to you…
    Web Developer: “Just because you can do that doesn’t mean we have a major problem like you say it is. It’s just you that did it!” SG dude: “Well more than likely, others have….we didn’t do anything fancy…”. Web Developer: “Well nothing has ever happened so it’s just you guys!” SG dude: “You have no logging”. Web Developer: “We’ve never been hacked!”
  • On Data Loss Prevention (DLP) » My Wife Finally Knows What I Do
  • The Two Kinds Of Security Threats, And How They Affect Your Life | securosis.com
    We get money for noisy threats, and get called paranoid freaks for trying to prevent quiet threats (which can still lose our organizations a boatload of money, but don’t interfere with the married CEO’s ability to flirt with the new girl in marketing over email).
  • Marcus Ranum on Network Security - CSO Online - Security and Risk
    The real best practices have been the same since the 1970s: know where your data is, who has access to what, read your logs, guard your perimeter, minimize complexity, reduce access to "need only" and segment your networks.
    • ]]>     Thu, 20 Nov 2008 21:00:00 +0000 data data collection web developer siem data loss prevention security siem blog security threats network security Links for 2008-11-20 [del.icio.us]     <![CDATA[Links for 2008-11-19 [del.icio.us]]]> http://securityratty.com/article/359d830ca1e8df85568ee491fac7b4b0 http://securityratty.com/article/359d830ca1e8df85568ee491fac7b4b0
  • QualysGuard PCI Pass/Fail Status Criteria - Qualys
  • Press Releases - November 11, 2008 - Q1 Labs
    free, downloadable, log management and compliance product that provides organizations with visibility across their networks, data centers, and infrastructures
  •   Healthy Paranoia: Top 50 Internet Security Blogs by The Daily Netizen
  • GOVCERT.NL Symposium 2008
  • Looking for Trouble - WSJ.com
  • ClearNet Security : It’s hard to build a smart SIEM
    If you find yourself evaluating SIEM products, dig in and investigate how each works - you don’t want yesterday’s product.
  • PCI Perspectives by Dave Taylor
  • Lehman Bros 'killed by complexity' (physicsworld.com Blog) - physicsworld.com
    • ]]>     Wed, 19 Nov 2008 21:00:00 +0000 internet security blogs clearnet security dave taylor compliance product healthy paranoia labs free press releases physicsworld siem products Links for 2008-11-19 [del.icio.us]     <![CDATA[Come Meet at CSI in DC]]> http://securityratty.com/article/e6562d9c485cc52151697f063ce893ca http://securityratty.com/article/e6562d9c485cc52151697f063ce893ca SIEM Summit or catch me at the show floor (ask at Qualys booth)
    About me: http://www.chuvakin.org
    ]]>     Mon, 17 Nov 2008 03:44:00 +0000 duringafter siem summit qualys booth org floor chuvakin Come Meet at CSI in DC     <![CDATA[Events per Second the difference between a target and an assurance]]> http://securityratty.com/article/f9815504814bde06b74afe918ec8d827 http://securityratty.com/article/f9815504814bde06b74afe918ec8d827 We’ve been getting a good few questions recently about how many Events Per Second a SIEM product support. Well, that depends on a few factors:

    • The transport – processing Syslog events takes up a heck of a lot less processing power than collecting from a Windows box. Same with collecting data over an ODBC connection.
    ]]>     Sun, 16 Nov 2008 21:00:00 +0000 events syslog events takes siem product support windows box questions recently odbc connection lot transport data Events per Second the difference between a target and an assurance     <![CDATA[Links for 2008-11-10 [del.icio.us]]]> http://securityratty.com/article/e5dc439433ab04442decbc4c37c5a3a0 http://securityratty.com/article/e5dc439433ab04442decbc4c37c5a3a0
  • Got SIEM? - Part II « eIQviews
  • SIEM ( Chapter Three – SIEM) « Im Namen Allahs, des Allerbarmers, des Barmherzigen
    • ]]>     Mon, 10 Nov 2008 21:00:00 +0000 siem des des allerbarmers allahs chapter eiqviews Links for 2008-11-10 [del.icio.us]