Research Library

The top resource for free research, white papers, reports, case studies, magazines, and eBooks.

Share Your Content with Us
on for readers like you. LEARN MORE
Rules Versus Models in Your SIEM

Request Your Free White Paper Now:

"Rules Versus Models in Your SIEM"

Security Information and Event Management (SIEM) technologies have been used for years to detect threats and to address compliance requirements for organizations.

Many SIEM tools’ detection methodologies are primarily based on correlation rules that look for known attacks at the points of entry. Such rules become increasingly ineffective as attacks become more complex, longer lasting, or more distributed. Next-gen SIEM tools are behavior and context aware, and models are used to track user behaviors, which makes it very effective to detect unknown threats and complex attack chains.

Download this paper to learn about:

  • Difference between rules and models
  • Pros and cons of using rules and models
  • When do you use rules or models
  • Design considerations for rules and models

Offered Free by: Exabeam, Inc.
See All Resources from: Exabeam, Inc.

Recommended for Professionals Like You: