Security Intelligence

Automation, analytics and integration to drive your innovation

The boundaries of business infrastructures are being extended and sometimes obliterated by the emergence of cloud, mobility, social business, big data and more. While these emerging trends bring huge benefits, they also raise significant security concerns. Concerns that can have a direct impact to an organization’s brand, business continuity and financial future. As a result, organizations need a new approach to security, one which leverages intelligence in order to keep pace with innovation.

Whether an organization has a mature security model in place, or is just getting started, IBM can help chart a path to true security intelligence, enabling the pursuit of innovation.

IBM Security Services is extending its proven analytics tools to provide clients with a deeper, real-time look at advanced threats. The new and enhanced analytics tools include:

  • Suspicious Host Dashboard - New real-time analysis of in-and-outbound firewall traffic, correlated against third party suspicious host feeds, geographic IP location data and the intrusion detection and prevention systems within a set time frame.
  • IP Intelligence Report – New on-demand analysis of individual IP addresses, including summaries of geographic IP location, managed intrusion detection and prevention, Vulnerability Management 2.0, asset information and ticket summaries.
  • IP Center - New center to provide threat analysts with a global view on the attack activities of individual IP addresses, including the quantity and type of attacks as well as the industries targeted across IBM’s entire MSS customer base. By using analytics that tap into historical intelligence of intrusion detection and prevention events as well as firewall logs, IBM delivers its clients a more complete view of threats for actionable insight.
  • Automated Intelligence (AI) Correlation Engine – Enhanced engine enables IBM to chain together alerts from multiple service offerings identifying sequences of activity that equate to higher severity security incidents. This information can be applied to each customer as well as to the entire managed security service (MSS) customer data set, using lessons learned, identifying worldwide attack trends and completing the historical profiling picture of suspected attackers.
  • Managed Security Information and Event Management (managed SIEM) - New solution uses analytics tools to provide a powerful around-the-clock security monitoring and reporting system that can proactively identify and help prevent threats. This customer premise equipment-based solution can improve system uptime and performance and supports multivendor SIEM systems, adding value to existing SIEM investments.
  • IBM Hosted Mobile Device Security Management is a managed service that helps organizations protect against data loss and other risks caused by device theft, malware, spyware, and inappropriate applications. With this new offering, IBM provides device-appropriate security controls and ongoing monitoring as a managed service, allowing IT departments to securely support a broad range of personal devices.

What we offer

Featured literature

Related links