Communications and Technology Industry Research

Traditional Security Information and Event Management (SIEM) products are unable to secure organizations from cyber threats, according to a recent survey conducted by eIQnetworks (News - Alert).

Almost two-thirds (65 percent) of senior security professionals at Global 5000 and federal organizations agree with this fact that SIEM products fail to tackle modern cyber threats and insider attacks.

It is true that SIEM products provide useful data, but they are unable to detect the increasing number of data breaches and other successful cyber attacks on corporate and government enterprises, says eIQnetworks.

Enterprises and government agencies have realized that the SIEM products are no longer able to provide timely and accurate actionable information. As a result of this, these organizations are unable to identify an attack while it is taking place.

"Just as signature-based technologies long ago stopped being the only effective line of defense for enterprise and government networks, the SIEM approach of relying entirely on logs and other event-based information to effectively address modern enterprise threats is now dead, as well,” said John Linkous, vice president and chief security and compliance officer at eIQnetworks.

"Our survey suggests that security professionals are looking for a new approach to securing large distributed networks that gives security analysts visibility of all security and compliance data - not just logs and events - in a unified view via a single, integrated console. It also appears that they are not alone in this opinion – Gartner (News - Alert) released a research note in July, ‘Delivering Situational Awareness’ (ID# G00214313), highlighting the need for situational awareness in large distributed networks."