TMCnet Feature Free eNews Subscription
December 05, 2011

A Different Approach to the IT Security Challenge: eIQnetworks Interview

By Carrie Schmelkin, TMCnet Web Editor

Old ways just won’t cut it anymore when it comes to IT security, particularly as persistent threats, Wiki-leaks, and insider risks run rampant.



Fortunately for security analysts out there, eIQnetworks (News - Alert) has a new approach to IT security called “unified situational awareness,” and its flagship solution, SecureVue, has emerged as the only platform to provide a more accurate, in-depth view of an organization’s security position via a single console through comprehensive, real-time security monitoring, compliance automation, configuration auditing and forensic analysis.

“If you look at what information security people have to deal with on a day-to-day basis, they have to deal with an increasing amount of data – and not just the monitoring of the perimeter of the network,” John Linkous, vice president, chief security and compliance officer, told TMCnet. “They have to monitor applications, data bases, network traffic, and everything else. Historically, organizations have done that by buying point products.”

“But, as these attacks keep occurring, they are becoming increasingly complex and individual point products are not providing enough information or enough analysis of data to allow security analysts to identify things in real time and take action,” he added. “What situational awareness does is bring together all of the different elements of security data within the enterprise to a single database and provide analytical tools necessary to make sense of the information in real time.”

eIQ's SecureVue product offers large enterprises a variety of benefits as it allows organizations to proactively: protect against cyber attacks as SecureVue monitors compliance and trending against best practice polices and security controls, all from a single console; detect breaches since SecureVue monitors real-time security and compliance of multiple data types and cross-correlates all information for early breach detection and notification; and respond to breaches and policy violations as SecureVue minimizes mean-time-to-repair through fast and efficient forensics across all data.

eIQ’s target market is the large enterprise, particularly those in the financial services and retail sectors and federal government agencies.

In an effort to continue to expand its customer base, eIQnetworks has unveiled the beta version of SecureVue Express, a download that incorporates all of the key elements and capabilities of SecureVue in a free version. It boast the same GUI and data base on the backend and is available to the public in a limited license format.

“The goal is to provide customers with an understanding of how situational awareness is substantially more advanced and more effective at detecting these types of breaches,” Linkous said.

“The response has been pretty substantial,” he added. “We have seen not only a double digit percentage increase in traffic to the eIQ traffic website and SecureVue Express, but we are also on target in terms of our number of downloads and registration.”

With the rise in recent data breaches and IT security issues, now might be the best time to embrace situational awareness technology like eIQ.

This is particularly important because traditional technologies are no longer making the grade, according to eIQ.

“The number one reason is simply because these technologies that rely on signature based detections, whether anti -virus software, or anti-malware tools, are all looking for signatures – something that is a known entity,” Linkous said. “The problem is there are so many attack methods out there that until they get documented they don’t have a signature.”

“However, you can still detect those things by looking at what isn’t normal in your environment,” he added. “Situational awareness is about identifying not just a signature that went off, but about identifying what is abnormal. What do is we see in the environment what isn’t supposed to be there and use information related to that event to determine whether that was something that was normal or something that is a potential attack or an insider threat.”

To learn more about eIQ’s offerings, click here.


Carrie Schmelkin is a Web Editor for TMCnet. Previously, she worked as Assistant Editor at the New Canaan Advertiser, a 102-year-old weekly newspaper, covering news and enhancing the publication's social media initiatives. Carrie holds a bachelor's degree in journalism and a bachelor's degree in English from the S.I. Newhouse School of Public Communications at Syracuse University. To read more of her articles, please visit her columnist page.
» More TMCnet Feature Articles
Get stories like this delivered straight to your inbox. [Free eNews Subscription]
SHARE THIS ARTICLE

LATEST TMCNET ARTICLES

» More TMCnet Feature Articles