OSSIM

What is OSSIM?

AlienVault OSSIM, SIEM (Open Source Security Information and Event Management) provides a feature-rich open source SIEM, complete with event collection, normalization, and correlation. Launched by security engineers due to the lack of open source products available, AlienVault OSSIM was created specifically to address the reality that many security professionals face: a SIEM, whether open source or commercial, is virtually useless without the basic security controls needed for security visibility.

SIEM Open Source (AlienVault OSSIM) addresses this reality by providing a unified platform with many of the essential security features you need:

• Asset discovery
• Vulnerability assessment
• Intruder detection
• Behavioral Monitoring
• Correlation of SIEM events

AlienVault OSSIM harnesses the power of the AlienVault Open Threat Exchange (OTX), allowing users to contribute and receive real-time information about malicious hosts. In addition, continuous development is provided for AlienVault OSSIM because it is believed that everyone should have access to sophisticated security technologies to improve the security of everyone, researchers who need a platform for experimentation, and unknown employees who can't convince their businesses that security is a problem, AlienVault OSSIM gives you a chance to increase visibility and security control on your network.

Get the most out of AlienVault OSSIM with these features:

Webcast

• OSSIM Training: Best practices for setting up OSSIM installation and how to make the most of policies and actions.
• Improve security visibility with OSSIM correlation policies

Features

• Asset discovery
• Vulnerability assessment
• Intruder detection
• Behavioral Monitoring
• SIEM

System Requirements

For an AlienVault OSSIM installation, the minimum system requirements are as follows:

2 CPU cores

4-8 GB RAM

HDD de 250 GB

E1000-compatible network cards