Log, log and log some more

Tripwire looks to log files as the best source of security and compliance

Many years ago a wise journalist said that the first law of journalism was to know. The second was to write about it.  It is a rule that applies far more widely, of course, not least to security in IT systems that work in the cloud.

The first law here is to know – and know as soon as possible – that operations are going awry and what is happening. Only then does it become possible to take defensive steps or remedial actions to curtail or resolve the problem.

The core source for such information is, of course, the computer log files, and these are the target that Portland, USA, based security and compliance management specialist, Tripwire, which has just introduced an advanced log intelligence and enhanced correlation analytics solution. This pulls together the latest version ,7.0, of the company’s Log Center TLC, its Vulnerability Management system, IP360, and the company’s new risk evaluation platform, VIA Agent.

The package is aimed at the increase in sophisticated, targeted attacks which, when coupled with the increase in the data volumes make it difficult for enterprises to respond quickly to security events connected with cyber attacks. The volume of log data alone makes it hard for organisations to provide the high-speed analysis and filtering of event data necessary to respond to security events.

In addition, auditors are demanding evidence of complete log collection. Advanced evidence of log information is required for compliance with a growing range of security-related legislation around the world.

 The Log Center solution securely collects, analyes and correlates log data from devices, servers, applications and automated security processes to improve security and simplify compliance. Collected data is analysed and filtered so only actionable and relevant events are sent to IT security teams or forwarded to SIEM systems.

Its key features include reliable collection of all log data with local caching and smart bookmarking to avoid data loss; secure, encrypted communications between agents and manager; a small agent footprint that is ideal for cloud and virtual machines; data compression that reduces network footprint; an intuitive GUI that simplifies the creation of complex correlation rules; and intelligent correlation of the system state and business value of assets through integration with Tripwire Enterprise and Tripwire IP360.

43% of CIOs say their CEOs and/or board of directors have concerns about their company’s cloud...
Leaseweb has shared a major update on its contribution to the EU’s Important Projects of Common...
MIT researchers crafted a new approach that could allow anyone to run operations on encrypted data...
Google Cloud unveils new AI product updates, including the launch of Chirp 3 on Vertex AI and UK...
Palfinger UK, a T H WHITE brand, is the UK's trusted distributor and service specialist for...
Leaseweb Global has formed a strategic partnership with CDNetworks, an APAC-leading network with...
The starting signal for a network of decentralized data centers in Central Europe has been given:...
Expansion of Oracle Cloud Infrastructure supports the UK Government’s vision for an AI-driven...