SIEM References, S&T Hungary

SIEM References, S&T Hungary
T-Mobile Hungary, ArcSight ESM
S&T Hungary delivered a Security Event Management solution based on ArcSight products. The
system is now in phase 2 (initial deployment done, analysis content development is ongoing). The
solution records and analyzes logs of the whole network security system: 60+ firewalls, 5x NIDSs,
Unix and Windows servers, the authentication subsystem, Cisco network elements, and much more. It
also integrates data from the vulnerability scanner subsystem and interfaces with the GPRS and 3G
service network to provide traffic statistics. The main goal of the project is to integrate the diverse
security systems and enable one central incident identification, monitoring, reporting, and tracking
location, and also to reduce the automatically identified incidents to a humanly acceptable level by
means of extensive correlation.
Phase 3 involves supporting ISO 27001 compliance efforts and is also currently running. This phase
will provide reports and other monitoring content in order to assess the compliance status on the basis
of logs.
For more information about T-Mobile Hungary see: http://www.t-mobile.hu/english/index.ehtml
Maktel, ArcSight ESM, Macedonia
We have implemented an ArcSight ESM system at Maktel to support their Sarbanes-Oxley compliance
efforts. The system was delivered by S&T Macedonia while the initial implementation was carried out
by the engineers of S&T Hungary. Maktel is owned by Magyar Telekom (aka Hungarian Telecom,
which is owned by Deutsche Telecom, for more information see: http://www.telekom.mk/en/?z=219).
MOL Plc, Cisco MARS and ArcSight, Hungary
S&T Hungary implemented a Cisco MARS based Security Event Management system at MOL Plc in
Hungary. MOL is a Hungarian Oil and Gas company and has a number of interests in the region
(Slovnaft, INA, etc.; more information available at: http://www.mol.hu/en/ ). The system implemented
includes the largest Cisco MARS appliances, which are used to collect the events logged by
networking and security devices at the external connections to MOL’s network.
Currently we are working on a pilot project to implement an ArcSight ESM system as an umbrella
SIEM solution on top of the MARS devices, while also integrating logs of operating systems,
applications, and databases.

Hungarian Customs and Finance Guard, Hungary
S&T Hungary recently completed the “Preparation for the implementation of an IT Security Event and
Incident Management System” project at the Hungarian Customs and Finance Guard
(http://vam.gov.hu/ ). The project’s goal was to deliver a study about possible policies, processes,
technology, and implementation of a SIEM system, as well as a feasibility study.
Euronet Administration Ltd., Cisco MARS, Hungary
S&T Hungary delivered a regional Security Event Management system based on Cisco IDS and the
Cisco Monitoring Alarming and Response System (MARS). The system implemented covers the
Central Operations Site in Budapest and also includes 8 other Data Centers in other central and
eastern European countries (more information about Euronet is available at:
http://www.euronetworldwide.com/ ). S&T planned and implemented the whole system and now
supports the outsourced day-by-day operation of the system.
Primarily due to this project, S&T Hungary won the Cisco Worldwide Partner Excellence award for
2006 (award was presented in 2007).
CIB Bank, Cisco MARS and ArcSight, Hungary
S&T Hungary implemented a Cisco MARS based Security Event Management system at CIB Bank
Hungary. CIB Bank is one of the 5 biggest client banks in Hungary (the owner of the bank is Intesa
Sanpaolo S.p.A., which arose from the fusion of Sanpaolo IMI and Banca Intesa in 2007, for more
information see: http://www.cib.hu/index?defaultLanguage=English ). The system implemented
includes the largest Cisco MARS appliance, which enables logging of events in the central operating
center (network- and security devices, operating systems, etc.). As part of the project we also
implemented some customized parsers in order to be able to integrate the logs of some sources that
are not supported by the MARS out-of-the-box system.
We were recently awarded the SIEM phase 2 project, which will involve using ArcSight to monitor
critical applications at the bank.
OTP Bank, ArcSight ESM, Hungary
We have successfully completed a pilot project at OTP Bank Hungary with ArcSight ESM, and the
rollout of the implementation will be finished in June 2008 (it is thus not quite a completed project,
yet!). OTP Bank is the largest Hungarian bank.
For more information about the customer see: https://www.otpbank.hu/OTP_Portal/online/index_e.jsp

Raiffeisen Bank, Cisco MARS, Hungary
As a subcontractor, S&T Hungary implemented a Cisco MARS based Security Event Management
system at the Raiffeisen Bank in Hungary. The system implemented is linked to the bank’s networking
and security devices.
Due to our Non-Disclosure Agreements, more details about the above references (such as customer
contact details, reference letter, reference visits, etc.) are only available on request and with the
permission of the relevant client.