Monday, April 24, 2006

SIEM Market is a Failure... Now we Know Why!

Some quotes pretty much tell all - read this exciting blog post from analyst Eric Ogren...

"I have always regarded Security Event Management (SEM) as the most dysfunctional segment in the security industry."

"SEM vendors would always preach rapid response and attack prevention, even though they only examine log file entries written long after the attack has come and gone."

"It has just been a brain-dead market segment."

And, on the other hand, what is needed is a "good place to collect, filter, and manage audit logs of corporate activity."

In other words, log management with a brain (intelligence). Because "you wouldn't think of running your business without independent corporate auditing, you shouldn't think of running IT without auditing"!

Dr Anton Chuvakin