The purpose of this white paper is to identify and demonstrate how to detect five of the most significant security threats, allowing them to be addressed and corrected in a timely and efficient manner. Critical alert notifications and an effective resolution strategy will reduce IT costs, while increasing service availability and enhancing the security of your enterprise.
EventTracker is a highly scalable, enterprise-class event management, analysis and auditing system for Windows, SYSLOG and SYSLOG NG systems and SNMP devices. EventTracker enables a "defense in depth", where data can be collected, correlated and analyzed from the perimeter security devices down to application logs. To prevent security breaches, Event Log data becomes most useful when interpreted in near real time and in context. Context is vitally important because often the critical indications of impending problems and security violations can only be learned by watching patterns of events across multiple systems. EventTracker provides real-time capability that can proactively alert security personnel to an impending security breach.
Software Quality Research Library
