They say to be forewarned is to be forearmed. With that goal in mind, RSA, the security division of EMC, today released an update to its security intelligence software that enables IT organizations to monitor Web sessions in real time, while providing additional visibility into mobile computing traffic.
Once anomalous traffic behavior is detected, Blackshaw says that RSA Web Threat Detection software can then be configured to send alerts to a security information event management (SIEM) platform, which would use that information to quarantine that traffic.
Based on technology that RSA gained via the EMC acquisition of Silver Tail Systems, the RSA Web Threat Detection software is part of a vanguard of security intelligence offerings that are intended to close the loop between the identifying threats and actual remediation of a vulnerability.
Of course, the biggest problem IT organizations have today is that by the time they even recognize suspicious behavior on their site, it’s too late to do anything about preventing the attack. Providing the ability to identify anomalies in real time will give IT organizations the opportunity to discern unusual behavior on their sites that generally occurs days, sometimes even months, before an actual attack is launched.