Log, log and log some more

Tripwire looks to log files as the best source of security and compliance

  • 12 years ago Posted in

Many years ago a wise journalist said that the first law of journalism was to know. The second was to write about it.  It is a rule that applies far more widely, of course, not least to security in IT systems that work in the cloud.

The first law here is to know – and know as soon as possible – that operations are going awry and what is happening. Only then does it become possible to take defensive steps or remedial actions to curtail or resolve the problem.

The core source for such information is, of course, the computer log files, and these are the target that Portland, USA, based security and compliance management specialist, Tripwire, which has just introduced an advanced log intelligence and enhanced correlation analytics solution. This pulls together the latest version ,7.0, of the company’s Log Center TLC, its Vulnerability Management system, IP360, and the company’s new risk evaluation platform, VIA Agent.

The package is aimed at the increase in sophisticated, targeted attacks which, when coupled with the increase in the data volumes make it difficult for enterprises to respond quickly to security events connected with cyber attacks. The volume of log data alone makes it hard for organisations to provide the high-speed analysis and filtering of event data necessary to respond to security events.

In addition, auditors are demanding evidence of complete log collection. Advanced evidence of log information is required for compliance with a growing range of security-related legislation around the world.

 The Log Center solution securely collects, analyes and correlates log data from devices, servers, applications and automated security processes to improve security and simplify compliance. Collected data is analysed and filtered so only actionable and relevant events are sent to IT security teams or forwarded to SIEM systems.

Its key features include reliable collection of all log data with local caching and smart bookmarking to avoid data loss; secure, encrypted communications between agents and manager; a small agent footprint that is ideal for cloud and virtual machines; data compression that reduces network footprint; an intuitive GUI that simplifies the creation of complex correlation rules; and intelligent correlation of the system state and business value of assets through integration with Tripwire Enterprise and Tripwire IP360.

Progress Software launches Automate MFT, a cloud-based solution revolutionising secure file...
The EU Data Act is pushing SMEs and MSPs towards a multi-cloud, multi-vendor approach to mitigate...
Almaviva partners with OVHcloud to enhance compliant and sovereign digital solutions across...
Rebranding to Hammer Distribution, the company renews its commitment to distinguished service and...
Gcore introduces AI Cloud Stack, enabling CSPs and enterprises to deploy scalable, profitable AI...
Datadog surpasses 1,000 integrations, enhancing its platform's observability across diverse...
The numbers are in, and they paint a picture of transformation at unprecedented scale. As MIT's...
Alcatel-Lucent Enterprise introduces Rainbow Hospitality, a cloud solution transforming...