Gartner_Report1

《Gartner_Report1》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、MagicQuadrantforSecurityInformationandEventManagementGartnerRASCoreResearchNoteG00156945,MarkNicolett,KellyM.Kavanagh,8May2008,R272505092009BroadadoptionofSIEMtechnologyisdrivenbycomplianceandsecurityneeds.Newusecasesinareassuchasapplicationactivitymonitoringareemerging.WHATYOUNEEDTOKNOWFundingfors

2、ecurityinformationandeventmanagement(SIEM)technologydeploymentsisdriveninlargepartbytheneedtoquicklyaddressregulatorycomplianceissues,butmostorganizationsalsowanttoimprovesecuritymonitoringcapabilities.Anoptimalsolutionwillsupportthereal-timecollectionandanalysisoflogdatafromhostsystems,securitydev

3、icesandnetworkdevices;willsupportlong-termstorageandreporting;willnotrequireextensivecustomization;andwillbeeasytosupportandmaintain.Easeofdeployment,easeofsupportandlogmanagementfunctionsareweightedmoreheavilythanadvancedeventmanagementfunctionsortheabilitytoheavilycustomizeanSIEMdeployment.SIEMte

4、chnologyprojectsaretypicallyorientedtooneofthreemajorusecases:compliancereporting,threatmanagementorageneralSIEMdeploymentthatimplementsbothcapabilities.TheSIEMmarketiscomprisedofvendorswithproductsthatareoptimizedforaspecificusecase,provideamixof“goodenough”functionsforthemostcommonusecases,orareb

5、roadandflexiblebutcomplex.Thisyear'sMagicQuadrantforSIEMevaluatesthemost-commonsituation:AnSIEMprojectthatisfundedtosolveacompliancereportingissue,buthasprojectleadersthatalsowantbettersecuritymonitoringandeventmanagement.Organizationsmayneedtoevaluateofferingsfromvendorsinallquadrants,dependingont

6、heirrequirements.Productselectiondecisionsshouldbedrivenbyorganization-specificrequirementsinareassuchastherelativeimportanceofsecurityinformationmanagement(SIM)andsecurityeventmanagement(SEM)capabilities;theeaseandspeedofdeployment;theITorganization'ssupportcapabilities;andintegrationwithestablish

7、ednetwork,securityandinfrastructuremanagementapplications.MAGICQUADRANTMarketOverviewTheSIEMmarketisbeingdrivenbythreefactors:theemergenceofuserandresourceaccessmonitoringastheprimarycustomerproblemtobesolv