Rubidium

More documents

Recommendations

Info

general Nine out of ten sensitive networks are compromised by sophisticated and unfamiliar cyber threats. Even networks protected by advanced cyber security tools are susceptible. Many of these cyber threats focus on confidential and classified information from heavily protected government and military networks, ultimately undermining national security. These attacks target deliberately selected high-profile targets, including mission critical control systems, national infrastructures; critical sites security systems, safe-city networks and SCADA control networks. CyberSeal’s <strong>Rubidium</strong> is a unique SIEM system for the non-IT and non-technical users. It offers a top-notch architecture and artificial intelligence algorithms to provide clear, simple and intuitive access to Cyber Security threats and alarms in critical sites. CyberSeal’s SIEM appliance synthesizes four core components: • Security Information Management: It provides for the collection and processing of data and its incorporation, aggregation and analysis into meaningful information. The data is collected from various sources such as log files or socket connections. • Security Event Management: It focuses on real-time management of security-related events. Data sources typically include firewalls, switches and routers, IDS/IPS, application servers, DB servers, identity management servers, Web servers, network security hardware and endpoints. • Network Discovery: Automatically maps network connections and allows you to add supplementary information. It streamlines efficiency analysis by automating log collection, application detection, tuning, built-in policies and reports, detection of network elements (geographic location of elements) and incident prioritization. • Internal Console and External Element Management System: adds capabilities such as correlation of diverse data sources, vulnerability analysis, compliance reporting, event reporting, anomaly detection and notification. benefits Cost Effective and Ready Protection: Enjoy extensive cyber security coverage from the Cyber Security Operations Center (CSOC) in a matter of minutes. The seamless process of monitoring the organization via the web-based interface instantly provides reputation-based threat intelligence, risk prioritization and centralized security management. The system is easily scalable, fully redundant and backed up by a remote data recovery site. Lowered Rate of False Positives: Minimize false positives, optimize time utilization and allow security analysts to focus on genuine threats. The majority of events and notifications dealt with by CERT/CSOC operators are usually false alarms that are mistakenly flagged as malicious activity. In addition the system provides actionable alerts to prevent or respond immediately to significant cyber threats as they are detected. Leveraged, Non-Intrusive, Network-Based Security: Seamlessly integrate the appliance with existing network elements such as managed switches, firewalls, anti-virus applications, firewalls, Wi-Fi hotspots and other security mechanisms. Log data and alerts are then piped to the appliance and the user interface displays the actual layout of the installation. Reduced Acquisition Costs: Reduce security management acquisition costs and improve efficiency with centralized command and control,boostedby fully automated end-to-end operations.
views CyberSeal’s SIEM offers an intuitive web based user interface which offers a simple to use operation while keeping the users on top of complex cyber security situations. The cyber threats and events are presented in three different views, each offers fresh presentation methods: • SNAPSHOT: Graphical view of the current cyber security status of the network. The entire network is presented as several icons colored according to the cyber security threat level while taking the complexity to behind-the-scenes. domains approach CyberSeal’s SIEM provides an easy access to the Cyber Security information in the network by dividing the network into security domains. • Physical Network domain is providing an access to the LAN layer including connection mapping and security threats and events reported by CyberSeal’s TungstenCyber Security Switch and Cobalt data diode as well as from third party network equipment such as Ethernet Switches. • Network Security domain includes the network firewalls, IPs, VPN and Antivirus. It receives Cyber Security threats and events and integrates them with all other Cyber Security • Cellular domain is providing activity monitoring tools for preventing and reporting illegal and hostile cellular activities. • PHYSICAL: Geographical presentation of cyber events. Network components are located on geographical map or on any site diagram and colored according to their cyber security alarm level. • NETWORK: Graphical presentation of discovered network layout colored according to the current cyber security threat level. This view may be used by expert users to monitor the relations between network components while presenting cyber security events on top. • Wireless Network domain includes the Wi-Fi and wireless links. It provides security information on illegal network access by unknown clients, abnormal network activity and rogue devices. • Servers and Workstations domain is providing an access to the endpoint security information and to the security events generated by the computers operating systems (Windows and Linux). • User configurable domains may be added as required offering customized views of network or cyber sections. Each user configurable domain may include one or more network components, such as servers, workstations, switches and various software components.
Page 1: www.cyber-seal.net Rubidium CyberSe
Page 5 and 6: Open System As a key component of s
Page 7 and 8: Supported Network Elements vendor C

Rubidium

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?