Enterprise IT Security Event Manager (IT SEM) focuses primarily on the tools, technologies and services that are needed by IT security operations to manage security devices and the security of IT infrastructure, applications and transactions. The value proposition for such technology is the correlation of security data from multiple devices and systems to enable better security assessment and support appropriate remedial action. The motivation behind this technology grew out of the failure of intrusion detection systems (IDSs) to separate real threats from the background noise of ineffective probes, false alarms and normal system changes.
This paper is in pdf format. To
view it click here.