Security Event Management (SEM) with CEP (Part 1) – Introduction

Many readers may already know that I have a deep background in network management with an emphasis in computer and network security. My experience in this area, after leading countermeasure efforts for the USAF in the Langley Cyberattack, motivated me to write a CACM paper applying multisensor data fusion techniques to intrusion detection.

If you look further into the field of security event management or SEM, you will see that complex event processing and security event managment are a perfect match.  I first presented the relationship between CEP and SEM for TIBCO at an IDC event in Lisbon; and then followed up at TUCON with a presentation titled, Combating Fraud and Intrusion Threats with Event Processing.  

In the TUCON presentation, I outlined SEM functionality and explained the serious shortcomings of the current approaches to SEM in the marketplace.  Then,   I applied CEP to SEM and explained how CEP, in the context of my  CEP reference architecture, holds great promise for SEM.

In this new blog series, Security Event Managment (SEM) with CEP, I will cover this topic in detail.  Next in this series, we discuss trends and vulnerabilities in cyberspace.

Go to Security Event Management (SEM) with CEP (Part 2)



Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: