Automating the monitoring and analysis of audit logs is a logical approach that provides a consistent amount of accuracy. This is ever more important as companies are building networks of more complexity. These networks are also the open doors to hackers along with the business partners and suppliers. That's where Intrusion Detection Systems come in. Our organizations cannot solve Information Protection problems by just adding technology and ignoring the fact that we are not monitoring for security incidents.
Additional technology adds complexity and room for misconfiguration.
Much of Information Protection is attained through a combined effort of Policy, Process and Technology that provides Protection, Detection and Reactionary measures. As business requirements drive IT initiatives to take advantage of Internet-based standards and extend their services and networks, we as Security Specialists should be there to install our alarms. The Automation of monitoring and analysis of audit logs is a great step to provide a consistent amount of accuracy and coverage not manually possible. This is ever more important today as companies are building networks of more complexity that span the globe. Solving 'Dumb Days' with Security Visualization.