ArcSight Case Study: Defense Information Systems Agency
Summary:
ArcSight equips security specialists across the Defense Information Systems Agency (DISA) with the information and tools necessary to detect and respond to cyber threats and attacks.
Business Challenge:
DISA provides the IT backbone infrastructure for the President of the United States, DOD, and military commands. Because of the increasing dependence on information in the development and execution of the nation’s defense, the ability to see and respond to cyber threats in real time on a global basis is crucial.
Solution:
DISA has standardized on ArcSight to collect and analyze the raw security information that is generated from their global IT infrastructure. With rules-based correlation applied to the real time event flow, true threats and attacks are automatically detected and highlighted so that the Computer Emergency Response Teams can investigate and respond before damage is done.
Benefits:
Expert security staff that understand and can respond to cyber attacks are scarce and cannot possibly review and analyze the millions of raw events that occur each day. With automated real time correlation, the security staff sees the most threatening events along with the associated information necessary for them to formulate a response. Hence, the organization receives far better overall protection from the resources available.
