[May 17, 2013] Splunk introduces new version of Splunk App for Enterprise Security Tweet May 17, 2013 (Datamonitor via COMTEX) -- Splunk Inc., a provider of software for real-time operational intelligence, has announced the general availability of version 2.4 of the Splunk App for Enterprise Security. Splunk Enterprise and the Splunk App for enterprise security are a security intelligence platform that helps organizations discover unknown threats in real time with content, including new searches, dashboards and visualizations that enable statistical analysis of machine data. The Splunk App for enterprise security includes searches, dashboards and visualizations for Advanced Threat Detection that help to reveal what activity is abnormal and detect attack patterns. This statistical analysis reveals attacks and threats including command and control (CNC) instructions embedded in URLs; hosts communicating with new malicious websites; increases in unknown communications; unusual user agent strings in use; and abnormal amounts of source/destination traffic, the company said. "Statistical analysis is the new weapon of the security warrior defending against threats that bypass traditional security detection systems. This is one of the reasons why more than 1,500 organizations around the world rely on Splunk for security," said Mark Seward, senior director of security and compliance, Splunk. "Companies now understand that hidden in the terabytes of user-generated machine data are abnormal patterns of activity that represent the presence of malware or the behavior of malicious insiders. The new Splunk App for Enterprise Security enables statistical analysis of HTTP traffic to help security professionals determine a baseline for what's normal, quickly detect outliers and use those events as starting points for security analysis and investigation." http://www.datamonitor.com Republication or redistribution, including by framing or similar means, is expressly prohibited without prior written consent. Datamonitor shall not be liable for errors or delays in the content, or for any actions taken in reliance thereon [ Back To TMCnet.com's Homepage ]