An everyman SIM
Bruce Potter · Network Security · 2008
Managing all the information flooding from your network, security devices, and products can be a full-time job. Firewalls, anti-virus, IDS, and proxy servers are constantly logging data even when your systems are not under attack. The main purpose of these devices is to defend against and stop attacks, but the tidal wave of information coming from all these systems can make it very difficult to pick out a signal from the noise and distinguish between an attack, a system malfunction, and mere everyday traffic.