Another Type of Correlation – Vulnerability Correlation
NopSec
OCTOBER 27, 2012
The other day I was thinking about the concept of “event correlation” embedded into various SIEM products. Security events can be verified and false positives eliminated via correlation with other information such OS fingerprinting, netflows, vulnerability information, etc. It is the value proposition of SIEM and their added value even though it does not work all the times.
Let's personalize your content