A Security Information Management (SIM) system can contain a tremendous amount of
sensitive information. This is because it receives event logs from security systems
throughout a network. These logs potentially contain information that can be used to target
attacks at sensitive systems. For example, intrusion detection system (IDS) logs can contain
actual packets seen on the network. Some of these packets can be decoded with freely
available packet analyzers to find usernames and passwords that your employees might be
using to access websites, e-mail systems, and network devices.
Chapter Contents
Pages:
1 |
go to page 1  |
|
Windows IT Pro
Register
