A Practical Application of SIM/SEM/SIEM Automating Threat Identification

The goal of this paper is to explain how to use a SIEM effectively to identify and respond to security threats. The paper begins with level set information including definitions, capabilities requirements, architecture and a business case. Later I will cover aggregation and correlation design...

By

David Swift

May 21, 2007

All papers are copyrighted. No re-posting of papers is permitted

Related Content

CD - Blog - Making Linux Security Accessible Blog Series - Part 3_340 x 340.jpg

Understanding User Permissions: Your First Line of Defense - Part 3 of 5 of the Terminal Techniques for You (TTY): Making Linux Security Accessible Blog Series

Learn to manage Linux file access, set group permissions, and apply least privilege to protect your system from unauthorized changes.

Charles Goldner

Blog - Generic - Be Ready, Be Resilient_340 x 340.jpg

Be Ready, Be Resilient: Hands-On Cybersecurity Training & Skill Validation for Real-World Threats

Hands-on cybersecurity experiences bridge the gap between knowledge and action.

Ukraine-Russia Conflict – Cyber Resource Center

Access resources to help your organization navigate the cyber risk surrounding the Russia-Ukraine conflict.