Log, log and log some more

Tripwire looks to log files as the best source of security and compliance

  • 10 years ago Posted in

Many years ago a wise journalist said that the first law of journalism was to know. The second was to write about it.  It is a rule that applies far more widely, of course, not least to security in IT systems that work in the cloud.

The first law here is to know – and know as soon as possible – that operations are going awry and what is happening. Only then does it become possible to take defensive steps or remedial actions to curtail or resolve the problem.

The core source for such information is, of course, the computer log files, and these are the target that Portland, USA, based security and compliance management specialist, Tripwire, which has just introduced an advanced log intelligence and enhanced correlation analytics solution. This pulls together the latest version ,7.0, of the company’s Log Center TLC, its Vulnerability Management system, IP360, and the company’s new risk evaluation platform, VIA Agent.

The package is aimed at the increase in sophisticated, targeted attacks which, when coupled with the increase in the data volumes make it difficult for enterprises to respond quickly to security events connected with cyber attacks. The volume of log data alone makes it hard for organisations to provide the high-speed analysis and filtering of event data necessary to respond to security events.

In addition, auditors are demanding evidence of complete log collection. Advanced evidence of log information is required for compliance with a growing range of security-related legislation around the world.

 The Log Center solution securely collects, analyes and correlates log data from devices, servers, applications and automated security processes to improve security and simplify compliance. Collected data is analysed and filtered so only actionable and relevant events are sent to IT security teams or forwarded to SIEM systems.

Its key features include reliable collection of all log data with local caching and smart bookmarking to avoid data loss; secure, encrypted communications between agents and manager; a small agent footprint that is ideal for cloud and virtual machines; data compression that reduces network footprint; an intuitive GUI that simplifies the creation of complex correlation rules; and intelligent correlation of the system state and business value of assets through integration with Tripwire Enterprise and Tripwire IP360.

Only 8% of organizations are fully realizing the business benefits of their cloud investments with...
Research found that organisations are prioritising security, seamless integration, and compliance...
Virtual Production studio behind “Masters of the Air”, “Those About to Die” and “Here”...
Leaseweb has announced the availability of its Public Cloud service. It offers a highly competitive...
OVHcloud has introduced new state-of-the-art dedicated Bare Metal Advance servers powered by the...
VCF accelerates customer innovation by delivering public cloud scale and agility with private cloud...
Projected growth driven by large number of ransomware attacks and acceleration of the use of AI...
To solve for rising IT costs, IT and finance leaders collaborate to scrutinise technology spend and...