Software offers event management security.
Share:
Press Release Summary:
TowerView(TM) SEM combines real-time data correlation process with dynamic 3-D display to give security administrators accurate, relevant data on their network security events as they happen. It employs rules processing engine capable of performing advanced statistical, arithmetic, and Boolean functions. Correlation rules and analytics are applied to event data streams to identify anomalous activity. Vulnerability assessment data generates lesser false positives.
Original Press Release:
High Tower Software(TM) Sets New Standard in Real Time Security Event Management with TowerView(TM) Appliance
Intelligent Data Correlation, 3-D Presentation and Appliance Packaging Simplify Event Management for Security Administrators
Aliso Viejo, CA - February 16, 2004 - High Tower Software, Inc., a provider of real-time security event management (SEM) solutions, today announced the availability of its new TowerView SEM appliance. TowerView combines a patented real-time data correlation process with a dynamic 3-D display to give security administrators accurate, relevant data on their network security events as they happen, rather than seconds or hours later.
Unlike most SEM products, TowerView is packaged as an appliance to give security administrators an easy-to-deploy and easy-to-maintain solution.
"The Security Event Management market is starting to see a second generation of solutions like TowerView that provides greater accuracy, relevancy and immediacy in identifying real security threats. For administrators struggling to manage security data, this is a significant improvement," said Chris Christiansen, VP of IDC's Security Products. "High Tower brings a new view to the security world. With the experience developing complex, real-time data analysis engines for mission-critical assignments at NASA, High Tower offers an innovative solution for enterprises."
High Tower's core processing and display engine was originally developed by the company's co-founders at NASA's Jet Propulsion Laboratory for real-time collection, analysis and display of high volumes of electronic data from NASA's deep space missions. The technology is still used today by NASA and has been commercialized by High Tower for enterprise applications.
Intelligent Correlation and Dynamic 3-D Display
"Correlation speed and clear visualization were the two defining factors in our decision to deploy TowerView as a critical part of our network security infrastructure. At IGT, we need to ensure that we are getting real-time data in a useable format so that we can make accurate, immediate decisions," said Michael Dutton, information technology director at Acres Gaming, a wholly-owned subsidiary of International Game Technology (IGT). "TowerView quickly learned our network so it could identify normal traffic - resulting in identification of real security threats and no typical false positives. In fact, while we were installing TowerView, it identified an SQL worm that was trying to attack our network, and we were able to immediately identify and resolve the issue."
TowerView collects data and events in real time from virtually any source on the network. TowerView employs a powerful, proven rules processing engine capable of performing advanced statistical, arithmetic and Boolean functions. These robust correlation rules and analytics are applied to event data streams to identify anomalous activity and provide important insight to the security operator. TowerView's intelligent correlation includes:
o A granular approach to normalization, which effectively delivers more meaningful information from the analyses; and
o Network-wide event correlation, including more than100 pre-packaged rules. Self-adjusting rules monitor your network security devices and learn what traffic is normal. Because vulnerability assessment data is included, far fewer false positives are generated, and truly meaningful data is highlighted.
Correlated event data is presented in TowerView's patented 3-D display, the CyberGrid(TM). The CyberGrid provides a holistic view of the entire network and physical infrastructure, giving administrators quick access to detailed event information, recommended resolution actions, and external references. Most importantly, it highlights significant information to draw attention to the most serious events, and gives the analyst the ability to customize the display for ease of viewing. The CyberGrid eliminates the need to drill down into cumbersome log files, or the possibility of getting lost in hierarchical displays - an on-screen message explains the event summary with just one click.
"In the security world, more is not always better. The key is getting something useful and timely from the network infrastructure already in place," stated Dr. Ursula Schwuttke, co-founder of High Tower Software. "To date, none of the industry's SEM products have been able to effectively help I.T. administrators make sense of the disparate data coming from a growing number of security devices. Having spent more than 100 collective workyears creating advanced correlation and visualization technology for NASA, our company understands how to make sense of large volumes of data and make it meaningful to the IT administrator."
Pricing and Availability
The TowerView 1000 appliance, designed to correlate data from up to 30 devices, and the TowerView 2000 appliance, designed to correlate data for 30 to 90 devices, are both available immediately. Pricing starts at $48,000.
High Tower Software will be in Booth #1527 at the 2004 RSA Conference, which will be held at the Moscone Center in San Francisco, CA from February 23-27, 2004. About High Tower Software High Tower Software is a privately held company based in Orange County, California. With advanced technology developed and first used by NASA to analyze and display data from their deep space missions, the TowerView Security(TM) suite was designed to analyze extremely high volumes of data in real-time and present the results in a comprehensive yet intuitive 3-D display. For more information, visit hightowersoftware.com.
Tom Rice
Vice President
Merritt Group Public Relations, Inc.
office: 703.556.6821
mobile: 703.856.2218
rice@merrittgrp.com
merrittgrp.com
