Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Incident Response

NitroSecurity Makes SIEM Smarter with New Correlation Engine Appliance

Dedicated Appliance Brings Real-Time Threat Identification, Dynamic Scoring, Recursive Assessment and Predictive Analysis

NitroSecurity, the SIEM solutions provider set to be acquired by McAfee, has launched its new NitroView Advanced Correlation Engine (ACE) appliance.

Dedicated Appliance Brings Real-Time Threat Identification, Dynamic Scoring, Recursive Assessment and Predictive Analysis

NitroSecurity, the SIEM solutions provider set to be acquired by McAfee, has launched its new NitroView Advanced Correlation Engine (ACE) appliance.

NitroSecurity ACE Appliance SIEM SolutionAs part of NitroView version 9.0, the appliance delivers both real-time and historical correlation capabilities and provides customers the ability to correlate large volumes of disparate data that can be used to detect and remediate zero-day threats, streamline security operations, and provide IT security teams a way to predict and prevent future attacks.

NitroSecurity has been known for its high performance SIEM engine, and the dedicated Nitro ACE appliance offers two dedicated, high-performance analysis engines – “rule-less” risk score correlation and traditional rule-based event correlation – and provides a dedicated processing resource to correlate even larger volumes of data.

The company says there is no need to pause collection at the SIEM, even when replaying and correlating historical data, because NitroView ACE operates independently of NitroView’s core collection, analysis and reporting functions.

“Big Data is on the list of every analyst and industry watcher for 2012 – and the bigger the data set, the more places attackers can hide,” said Ken Levine, CEO of NitroSecurity.

The solution tracks activity related to an organization’s most important assets, applications or users, and builds a dynamic score that raises or lowers based upon real-time activity, which can trigger an alert for immediate analysis.

It also correlates logs and events, along with contextualinformation such as identity, roles, vulnerabilities and integrated asset scores to detect patterns indicative of larger threats – including zero-days.

In addition to predicting potential future targets and offering real-time assessment of live activity, NitroView ACE keeps a complete audittrail of priority scores and events. All activity can be “replayed” through either or both correlation engines for recursive threat detection. This allows an organization to forensically gauge the impact of previously undetected zero-day threats.

Advertisement. Scroll to continue reading.

The latest release of NitroView also includes hundreds of workflow and operational improvements including Role-based Watchlists, Alarm Management, Integrated Asset Management.

NitroView ACE can be fully managed from the same NitroView user interface used for its NitroView ESM SIEM solution.

Written By

For more than 15 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is founder and director of several leading cybersecurity industry conferences around the world.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Learn how the LOtL threat landscape has evolved, why traditional endpoint hardening methods fall short, and how adaptive, user-aware approaches can reduce risk.

Watch Now

Join the summit to explore critical threats to public cloud infrastructure, APIs, and identity systems through discussions, case studies, and insights into emerging technologies like AI and LLMs.

Register

People on the Move

Cloud security startup Upwind has appointed Rinki Sethi as Chief Security Officer.

SAP security firm SecurityBridge announced the appointment of Roman Schubiger as the company’s new CRO.

Cybersecurity training and simulations provider SimSpace has appointed Peter Lee as Chief Executive Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.