High Tower Debuts SEM Appliance
In a major milestone in the maturation process for security event management technologies, a small vendor will unveil the first dedicated SEM appliance.In a major milestone in the maturation process for security event management technologies, a small vendor will unveil the first dedicated SEM appliance. High Tower Software Inc.s TowerView box incorporates the companys SEM software, which includes a unique correlation and visualization feature that presents security events in three dimensions. As technologies such as firewalls and intrusion detection systems matured, they reached a point where customers demanded dedicated boxes for their deployment. Now, SEM is following the same path. The TowerView system is based on technology developed by a company founder at NASAs Jet Propulsion Laboratory to handle the large quantities of data spacecraft beam to Earth. The JPL did not use a database to store that data because it was valuable only at the time of its creation and transmission. As a result, TowerView may be the only enterprise SEM product that doesnt have an in-line database.
This allows the system to work much more quickly because it doesnt have to write to, and then query, a database. The core function of TowerView is the same as other SEM products: to correlate and analyze security data from a variety of devices. The system applies a series of more than 100 preset rules to the data streams, looking for anomalies and known attacks. Customers can also write their own rules, and the system is capable of learning on the fly and adjusting rules to meet emerging conditions.