Security Monitoring and Remediation

Security Management includes Novell Sentinel™, a high-performance security information event management (SIEM) tool that helps you meet today's security challenges head-on. You are fighting a losing battle to protect your electronic assets against fraudsters, glory-seeking hackers, and even your own employees. It's time to take a fundamentally new approach to security.

The old security model that focused on securing the corporate network has fundamentally changed. These days you have both permanent and temporary employees, and they use applications that live within the enterprise and outside in SAAS environments. They might access them from a smartphone or from a terminal in a coffee shop.

You need to take a fundamentally new approach to security, with the central focus on controlling and monitoring access to the resources which are important to your business.

Sentinel allows you to:

• Collect security events from infrastructure, databases, and applications
• Correlate security events in real-time to detect anomalies
• Use dashboards to monitor security events
• Automatically remediate security anomalies
• Enrich security events with contextual information to monitor user behavior

Enterprise protection against security threats

As you know, data breaches are extremely costly. And recent trends indicate both the number of breaches, and the cost per breach, are increasing. Some estimate that the average cost of a breach is US$6.6 million, which includes the cost to notify individuals, legal expenses and fines. And beyond the tangible costs, the damage to a company's brand can be ruinous.

Novell Sentinel arms you against data breaches. It has an advanced correlation engine that can spot weak points before hackers do, or even detect a breach as it's happening. We make it much harder for insiders or outsiders to get to your sensitive data.

If you can detect breaches quickly, you can contain them quickly. Most breaches are detected months after they occur. In fact, most of the time the initial breach itself is not enough to cause the leakage of sensitive data. In the case of a recent well-publicized data breach at a large credit payments processor, it took hackers over six months from the time they initially gained access through a SQL injection attack to when sensitive credit card data was actually stolen. During that time, they mapped the network, probed for weak points, and took their time to plan an attack.

Sentinel can analyze the trail of information left by hackers and detect their presence, even when everything seems fine. If you have the tools to identify an attack and react quickly, an individual breach will be far less likely to damage your business.

A SIEM is only as useful as the information that it has access to. Novell Sentinel has out-of-the-box support for a wide variety of common systems. What's more, Sentinel has the ability to enrich events with additional contextual information. Providing this context to event data allows Sentinel to find anomalies where other SIEM solutions would fall short.

For example, Sentinel can detect if a user is logging in to two systems at the same time from two different locations, even if the applications have separate login IDs. This additional layer of security will let you detect and stop the targeted attacks of today and tomorrow.

Sentinel sits at the middle of all the security infrastructure in an organization. It collects the data that is generated by other security tools, IT infrastructure, and even applications. Sentinel's advanced correlation engine monitors your entire infrastructure and detects security anomalies that would otherwise go unnoticed. Using the intuitive graphical displays and dashboards, you can have real-time insight into the current state of security within your enterprise. Sentinel includes a flexible workflow engine for automated or manual remediation, and ships with the controls that are needed for a wide variety of regulations.

Which Products Do I Need?

Products that provide Security Monitoring and Remediation:

• Sentinel
• Sentinel Rapid Deployment (RD)