Significance of security information and event management (SIEM) in modern organizations

Abstract

This paper addresses Security Information and Event Management in terms of modern-day scenario and how it has come about to be an evolved and better technology than earlier. Merging the basics of two different technologies, namely Security Information Managgement and Security Event Management, SIEM has been successful in not only identifying the potential and actual threat but also extends to manage and pre-sent remedial solutions. In the wake of advanced security invasions, it has replaced Intrusion Detection and Prevention System with remarkable efficiency. The working of SIEM, how it is related to the log management and what are the implications of deploying it in a modern enterprise is presented. Finally, what all criterias matter while selecting a suitable SIEM has been discussed in the paper.