Rubidium

More documents

Recommendations

Info

features Holistic View: A unique multi-tier approach allows each tier to provide additional information and adds another viewpoint on the system’s security status. SIEM is endowed with a range of monitoring capabilities from close analysis of each and every local log to an overview of the entire communications network. Out-of-the-box templates: Assist in meeting compliance requirements and reduce the hassle of aggregating multiple data feeds by simplifying the creation of configurable rules and policies for extracting useful information from network elements. Real time Alerts: IT and security teams turn to SIEM to help them identify potential attacks or policy violations while they occur and to warn of anomalous network activity. This permits a faster response, allowing security teams to nip the threat in the bud. It also reduces damage from an attack and recovery time after an attack. Visibility: A single security dashboard presents What, Who and When, displaying attack type, attack targets and attack time. Proactive Approach: The SIEM appliance integrates with vulnerability scanning tools and a program of routine scans to provide an effective, proactive means of detecting threats. Event Correlation: Complex Event Processing (CEP) technology performs a sophisticated correlation analysis of intrusion evidence to reduce false positives, ensure completeness of detection and provide a bird’s eye view of incidents. Distributed architecture permits smooth processing and monitoring of numerous daily log entries. Log Collection and Management: Hassle-free, automated log collection from multiple sources. SIEM provides a central repository for log storage and archiving. It also provides a method of forensic incident analysis through normalization of dissimilar data sources. It permits root cause analysis and investigation of archived logs for complete forensics. Reporting: Clear reporting distinguishes between anomalies and misuse. Practical Analysis: SIEM deals effortlessly with the huge quantity of data generated by security and network devices. It correlates events and pipes them into a sophisticated data mining engine that uses both behavioral and context-based methods. Versatile Access: A highly intuitive web-based user interface (aka: a thin client) accompanied by a smartphone/ tablet app provides remote, secure and around the clock connection options. Ticketing: Investigations triggered by CyberSeal’s SIEM are logged within the system as tickets. Enhanced Administrative Capabilities: For a more secure environment and convenient operation, the appliance enables the administrator to control access rights to the application and its sites, to control passwords and to monitor activity. Compliance: Workflow designed to facilitate the best IT practices and comply with regulatory initiatives.
Open System As a key component of security and IT operations infrastructure, CyberSeal’s SIEM seamlessly integrates with other element managers reporting systems or enterprise management products. It integrates smoothly with network/application configuration management, help/ service desks, performance management, identity and access management, Wi-Fi hotspots, MDM solutions and network fault management. The appliance also uses open APIs and software development kits to facilitate interoperability between products (SIEM, Log Management, Syslog). Alerts are generated in industry standard format (e.g. SNORT IDS Syslog Format, CEF Syslog Format) and can also be directed to any CSOC of the customer’s choice, with a unique northbound interface to enterprise level or national level SIEMs. SIEM is a unified platform that addresses security and compliance needs across critical infrastructure and industrial process control networks including water treatment, power utilities, public works and oil & gas installations. • Integration with additional and emerging technologies: Collects and correlates information from SCADA networks, satellite network connections and other sources. • Integration with physical security technologies: Correlates information from both IT systems and hardware security systems. Unique Module for SCADA Application • Defending the defender: Designed with resilience in mind and implemented with rugged architecture. • Turnkey deployment: Provides comprehensive security without compromising process reliability. • Transparence: Industrial Control System security remains fully visible. • Compliance: Addresses regulatory compliance for NERC CIP, NRC 73.54, CFATS and others. compatible With All CyberSeal Security Products • Tungsten – The Cyber Security Switch for physical security and safe-city applications has a built-in SCADA protocols probe. • Vanadium - An IMSI Catcher Detector for critical infrastructure facilities, to reliably detect fake cellular base stations attempting stealth eavesdropping on-site. • Cobalt - A Unidirectional Traffic Enforcer (Diode) to securely connect disparate networks. • Yttrium - An IMSI Catcher that provides real time monitoring and control of mobile phone intrusions into the network perimeter and restricted zones such as prisons and other restricted access locations. Industry Leading Partnerships CyberSeal’s extensive collaboration with our specialized partner portfolio enables us to provide a truly comprehensive solution. CyberSeal has partnered with leading security vendors to merge expertise and create a better synergy in the areas of physical and cyber security. CyberSeal’s partnership program creates a “force multiplier” that can improve situational awareness and emergency decision-making. Magal’s Fortis 4G Integration Integrating CyberSeal’s SIEM alerts with Magal’s PSIM alerts provides continuous monitoring of the network perimeter. We have also integrated the various components and systems that activate events and alarms to trigger the appropriate response to cyber trespassing and cyber-attacks.
Page 1 and 2: www.cyber-seal.net Rubidium CyberSe
Page 3: views CyberSeal’s SIEM offers an
Page 7 and 8: Supported Network Elements vendor C

Rubidium

Create successful ePaper yourself

Delete template?

Save as template?