Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Analytics

9/8/2015
03:00 PM
William Jackson
William Jackson
Slideshows
50%
50%

5 Free Security Analytics Tools

It's getting tougher to stay on top of the growing volume of security data generated. Take a look at some analytics tools for budget-conscious organizations.
Previous
1 of 6
Next


Source: securesoftwaredev.com

Source: securesoftwaredev.com

The adoption of mobile and cloud computing is expanding the security perimeter of the modern enterprise, and organizations are looking deeper into their IT infrastructure to monitor for malicious activity or software. These trends are producing a growing volume of threat data to be evaluated. To turn this data into meaningful intelligence, tools are needed that go beyond traditional security information and event management (SIEM) to integrate and analyze disparate types of data, structured and unstructured.

Analyzing threat data can be a non-trivial expense, especially for small and midsized organizations. Beyond software licensing, there is the cost of hardware, personnel, and training. But there are some free tools out there that can help.

 

William Jackson is writer with the <a href="http://www.techwritersbureau.com" target="_blank">Tech Writers Bureau</A>, with more than 35 years' experience reporting for daily, business and technical publications, including two decades covering information ... View Full Bio
 

Recommended Reading:

Previous
1 of 6
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
jdubow570
100%
0%
jdubow570,
User Rank: Apprentice
9/17/2015 | 10:19:47 AM
Title is misleading
These may and probably are good tools, but Splunk is far from free and Symbiosis is reasonably priced but not free. Why not just call it like it is. Especially now when people are reeling form euphemistic labels like "Affordable Care" , "peace with Iran" , assorted red lines etc etc. 

 
OwenDale
100%
0%
OwenDale,
User Rank: Apprentice
9/9/2015 | 3:48:23 AM
5 Security AnalyticsTools
Fantastic information, this is helpful for me and other it people. thanks for sharing
Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-32814
PUBLISHED: 2021-08-03
Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely connected clients to destroy and/or manipulate critical files on the host's file system. This security bug has been patched in version 0.5.1. Ther...
CVE-2021-32017
PUBLISHED: 2021-08-03
An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the listing of the content of the remote file system. This can be used to identify the complete server filesystem structure, i.e., identifying all the directories and files.
CVE-2021-21579
PUBLISHED: 2021-08-03
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links.
CVE-2021-21580
PUBLISHED: 2021-08-03
Dell EMC iDRAC8 versions prior to 2.80.80.80 &amp; Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate.
CVE-2021-21581
PUBLISHED: 2021-08-03
Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim&acirc;&euro;&trade;s browser by tricking a victim in to following a specially crafted link.