Frost&Sullivan：全球SIEM和LM产品市场分析报告
2010年11月9日，咨询公司Frost&Sullivan发布了新一期的《全球SIEM和LM产品市场分析报告》。
这份115页的报告主要分析了2009年的数据，并针对2006年至今的数据进行了整理分析，还预测了到2016年的趋势。报告指出：SIEM和LM products are continuing to gain greater awareness as the threat and vulnerability landscape increase. As these types of attacks become more sophisticated, organizations are implementing security products, such as a SIEM, to protect virtual and physical assets. Aside from core features, netflow analysis, data loss prevention, and vulnerability scanning have been key features offered as an add-on to a SIEM or part of a whole security suite. The market has also seen the move from software appliances to physical appliances and now virtual appliances. The increase of sales and use of managed services has also served as an option for organizations looking to implement a SIEM in their operations.
报告的市场概览内容摘要：
Rising Complexity and Incidence of Cyber Crimes Make a Case for SIEM and Log Management Products
The escalating severity, complexity, and occurrence of cyber crimes, especially relating to online transactions, have compelled organizations to implement sophisticated security products to thwart criminals both within and outside the organization. SIEM products offer protection against malicious activity throughout a network by constantly monitoring and acting upon safety intrusions, thereby safeguarding an organization’s virtual and physical assets. With various options such as implementation through hardware or software appliances, and managed services, SIEM is a vital component in the secure and smooth operation of a business’ network. A combination of SIEM and logging solutions is an option that all organizations must give due consideration to. SIEM products not only help organizations maintain and comply with security regulations, but also offer defense that, along with monitoring and reporting, allows customization and scalability.
SIEM products have been designed to incorporate multiple functions such as logging, reporting, network behavior. analysis, and alerts. The market for these products are at the maturity stage, wherein emphasis is placed on increased feature sets, easier implementation, and better integration with other security products. SIEM’s product visibility has improved with wider adoption; however, the high costs of deployment and the difficulty in quantifying its return on investment (ROI) have deterred its wide-scale adoption. Despite the availability of multiple options, participants must present the ROI benefits of an SIEM or a log management product. “Due to the recent economic downturn and the consequent cut in IT budgets and staff, the demand for SIEM and log management products has increased,” says the analyst of this research. “Financial institutions, government agencies, and others need a solution that allows them to stretch their capabilities and help lockdown their networks.”
While most of the Fortune 500 companies already have an SIEM system running, the mid-market adoption is slower, due to the cost of a SIEM, and thereby, holds substantial opportunities. SIEM’s definition and functions have become unclear with feature sets increasing and varying by vendor. This makes it imperative for customers to be better educated regarding the compatibility and scalability requirements specific to their case. “SIEM vendors will have to create a message correlating the necessity and capabilities of a SIEM in an organization’s security environment,” notes the analyst. “Although SIEMs are pre-packaged with a set of security features, vendors will have to market to potential and current clients based on their specific use-cases to clearly inform. them of the value SIEM can lend to their security portfolio.”
这份115页的报告主要分析了2009年的数据，并针对2006年至今的数据进行了整理分析，还预测了到2016年的趋势。报告指出：SIEM和LM products are continuing to gain greater awareness as the threat and vulnerability landscape increase. As these types of attacks become more sophisticated, organizations are implementing security products, such as a SIEM, to protect virtual and physical assets. Aside from core features, netflow analysis, data loss prevention, and vulnerability scanning have been key features offered as an add-on to a SIEM or part of a whole security suite. The market has also seen the move from software appliances to physical appliances and now virtual appliances. The increase of sales and use of managed services has also served as an option for organizations looking to implement a SIEM in their operations.
报告的市场概览内容摘要：
Rising Complexity and Incidence of Cyber Crimes Make a Case for SIEM and Log Management Products
The escalating severity, complexity, and occurrence of cyber crimes, especially relating to online transactions, have compelled organizations to implement sophisticated security products to thwart criminals both within and outside the organization. SIEM products offer protection against malicious activity throughout a network by constantly monitoring and acting upon safety intrusions, thereby safeguarding an organization’s virtual and physical assets. With various options such as implementation through hardware or software appliances, and managed services, SIEM is a vital component in the secure and smooth operation of a business’ network. A combination of SIEM and logging solutions is an option that all organizations must give due consideration to. SIEM products not only help organizations maintain and comply with security regulations, but also offer defense that, along with monitoring and reporting, allows customization and scalability.
SIEM products have been designed to incorporate multiple functions such as logging, reporting, network behavior. analysis, and alerts. The market for these products are at the maturity stage, wherein emphasis is placed on increased feature sets, easier implementation, and better integration with other security products. SIEM’s product visibility has improved with wider adoption; however, the high costs of deployment and the difficulty in quantifying its return on investment (ROI) have deterred its wide-scale adoption. Despite the availability of multiple options, participants must present the ROI benefits of an SIEM or a log management product. “Due to the recent economic downturn and the consequent cut in IT budgets and staff, the demand for SIEM and log management products has increased,” says the analyst of this research. “Financial institutions, government agencies, and others need a solution that allows them to stretch their capabilities and help lockdown their networks.”
While most of the Fortune 500 companies already have an SIEM system running, the mid-market adoption is slower, due to the cost of a SIEM, and thereby, holds substantial opportunities. SIEM’s definition and functions have become unclear with feature sets increasing and varying by vendor. This makes it imperative for customers to be better educated regarding the compatibility and scalability requirements specific to their case. “SIEM vendors will have to create a message correlating the necessity and capabilities of a SIEM in an organization’s security environment,” notes the analyst. “Although SIEMs are pre-packaged with a set of security features, vendors will have to market to potential and current clients based on their specific use-cases to clearly inform. them of the value SIEM can lend to their security portfolio.”