| Security Event Manager |
Article Index for Security |
Website Links For Security |
Information AboutSecurity Event Manager |
| CATEGORIES ABOUT SECURITY EVENT MANAGER | |
| information systems | |
|
SEMs are a relatively new idea, and in late 2005 are still evolving rapidly. Just a year or two ago they were called Security Information Managers (SIMs). SEMs can help satisfy U.S. regulatory requirements such as those of Sarbanes-Oxley which require (among other things) that certain events, such as accesses to systems and modifications to data, be logged and that the logs be kept for a specified period of time. Many systems and appplications which run on a computer network generate events which are kept in event logs. These logs are essentially lists of events, with records of new events being appended to the end of the logs as they occur. Well-defined Protocols , such as SYSLOG and SNMP , can be used to transport these events, as they occur, to logging software that is not on the same host on which the events are generated. It is beneficial to send all events to a centralized SEM system for the following reasons:
|
|
|