Five Critical Steps for Handling a Security Breach
They say to be forewarned is to be forearmed. With that goal in mind, RSA, the security division of EMC, today released an update to its security intelligence software that enables IT organizations to monitor Web sessions in real time, while providing additional visibility into mobile computing traffic.
Amy Blackshaw, senior product marketing manager for RSA, says the ability to track specific Web sessions using the latest version of RSA Web Threat Detection software gives IT organizations the visibility they need to identify anomalous behavior that is indicative of a potential security threat. The new release also extends that capability to mobile computing scenarios by adding support for the widely used JavaScript Object Notation (JSON) data format.
Once anomalous traffic behavior is detected, Blackshaw says that RSA Web Threat Detection software can then be configured to send alerts to a security information event management (SIEM) platform, which would use that information to quarantine that traffic.
Based on technology that RSA gained via the EMC acquisition of Silver Tail Systems, the RSA Web Threat Detection software is part of a vanguard of security intelligence offerings that are intended to close the loop between the identifying threats and actual remediation of a vulnerability.
Of course, the biggest problem IT organizations have today is that by the time they even recognize suspicious behavior on their site, it’s too late to do anything about preventing the attack. Providing the ability to identify anomalies in real time will give IT organizations the opportunity to discern unusual behavior on their sites that generally occurs days, sometimes even months, before an actual attack is launched.
