TruThreat works in real-time, aggregating the output of third-party vulnerability scanning tools such as Nessus, ISS Internet Scanner, Symantec ESM and Qualys, and mapping those to entries in a central asset table that lists hosts, applications and processes.
The feature complements the ArcSight 2.0 software, which correlates attack data collected from the logs of security devices to present an event-oriented picture of network security. About 60 vendors’ products are supported in the latest release.
The security event management (SEM) space is expected to heat up this year, as ArcSight and its young competitors mature and bigger security software vendors launch their own products and start sniffing around for likely acquisitions.
Symantec Corp launched its SEM suite, Security Management System (SSMS) last fall. Network Associates Inc told ComputerWire two weeks ago that it is looking at the possibility of acquiring an SEM company as a means to unify its point products.
ArcSight’s VP of marketing Larry Lunetta said that the company thinks Symantec will have a challenge striking partnerships in the SEM space, as products in its wide range of offerings will often compete against third-party products it needs to interoperate with.
ArcSight competes against the young companies including OpenService, GuardedNet, netForensics and Network Intelligence, among others. There’s a lot of small players, and that’s a recipe for consolidation, Lunetta said.
