Moving Toward a Unified Threat Assessment and Analysis Tool
IT security tools have evolved to solve specific problems. Each tool looks for and deals with a specific type of event, (network firewalls, IDS, antivirus, etc.). Each “sees” the IT security world in terms of the problems that it solves and reports out what it “sees” in terms defining the problem it has been created to solve.
The bad guys, who are often the author of these problems try to be sneaky and conceal their malfeasance from the tools by taking on altered appearances and by breaking up their tricks into smaller packages that can be assembled after they are past the scrutiny of security tools. They also try to hide their behavior within the sheer volume of traffic being experienced today.
IT security solutions are being morphed by two forces: first, clever concealment of attacks, and second, data volumes so great as to overwhelm traditional security tools.
