OpenSOC at first glance might appear to be a SIEM (Security Information and Event Management) system but according to Annie Ballew, Solutions Architect in the Cisco Security Business Group, it isn’t a SIEM technology in the traditional sense. Rather Ballew said that OpenSOC should be considered as a big data technology for security analytics.
“Our goal is to push the technology forward for overall security incident investigation and visibility by leveraging advanced big data techniques,” Ballew said. “OpenSOC does provide SIEM-like capabilities, but it also incorporates forensics capabilities, enables machine learning and analytics, and rapidly applies external information sources to security and network telemetry as it comes in.
Read the full story at Enterprise Networking Planet:
Cisco Goes Open-Source for Big Data Security Analytics
Sean Michael Kerner is a senior editor at InternetNews.com. Follow him on Twitter @TechJournalist.