Network security is rapidly evolving. The numerous technologies that fall within the network security domain—such as firewalls, intrusion prevention systems, vulnerability assessment systems, antivirus, and endpoint compliance solutions—are beginning to share data and reporting functions, and security management is being centralized and consolidated. This is an important development. Previously, single-function, vertical security tools and products were only able to do part of the job in a true layered-security environment. Today, integrated, cooperative security technologies that can leverage each other’s security information and enforcement capabilities are on the forefront of innovation in the security marketplace.

The move toward integration has evolved in response to a number of factors: the continually escalating threat environment; the enactment and enforcement of data security regulations; the calamitous costs associated with compromised data and network downtime, and shortage of security staffing resources in what is becoming an ever increasing manual security management process.

In an attempt to get an enterprise view of security information, many organizations have turned to Security Information Managers (SIMs) as a way to collect and correlate data from multiple security tools. While helpful, this approach requires even more staff resources to correlate information from disparate security systems. In the end, only limited value is achieved as staff are still required to manually act upon the correlated data.

Organizations are seeking proactive, correlated, comprehensive security management that provides a view into their security posture and automates appropriate responses to identified threats. This integrated approach goes beyond the event log correlation provided by SIMs because it automates the appropriate actions that mitigate the threats.

Integrated network security provides tangible tactical advantages:

• Relevant information is correlated among multiple security systems.
• Automated, protective actions are triggered in real time based on correlated data.
• Threats are identified, isolated, and acted on quickly, minimizing exposure to risk.
• Security is administered with maximum efficiency.

This paper examines the trend toward security integration and illustrates how a real-world threat could be isolated and defended against in an integrated environment.

-1-

Explore Our Topics

• BPM & Enterprise Architecture
• BPM Standards
• BPM Implementation
• BPM Best Practices
• Continuous Process Improvement
• BPM Governance
• Service Governance

• Business to Business (B2B)
• BPM for Supply Chain
• BPM for Customer Management
• BPM for Financial Services
• BPM for Healthcare & Insurance
• BPM for Government

• Business Activity Monitoring
• Event Processing
• Process Intelligence
• Business Rules Management
• Decision Management
• Operational Intelligence

• Workflow Automation
• BPM & Enterprise 2.0
• BPM & Web 2.0
• BPM & ECM
• Case Management
• Collaboration
• Enterprise Portals
• Social BPM

• BPM & Cloud Integration
• BPM Analysis & Optimization
• Business Process Simulation
• Process Visibility & Monitoring
• Process Orchestration
• Process Discovery
• Process Modeling

Home
Webinars
Blogs
ebizQ Forum
All Topics
Subscriptions
White Papers
Analyst Corner
Follow us on Twitter
Fan us on Facebook

Explore Our Topics

BPM Strategy
BPM Solutions
Event Processing Strategy
Content-Centric & Collaborative BPM
Process-Centric BPM

About Us
Editorial Submissions
Feedback
FAQ
Advertise With Us
Site Map
Privacy Policy
Unsubscribe