Network Monitoring As Security

     Network monitoring can double as a security tool.  Most organizations already have some itoring systems incorporated into their systems for generic IT management tasks.  Some of these are service-level agreement-related tasks like capacity planning, performance uptime monitoring, and quality service.  Companies that are not already using monitoring tools may be able to sell management on them because they can pull double duty. 

     Some security areas that can be helped with monitoring tools would be looking for denial of service conditions, system and asset inventory, investigations support, behavioral anomaly detection, and new and emerging value propositions like virtualized systems. Systems may already be in place that could be leveraged to forward the goals of security even if that was not the original intent when it was purchased.

     Managers may be able to do more with less, as is so often necessary, by looking at increasing the usage of their monitoring systems.  Using the systems to their full potential and ability could add a another great layer of protection to their security framework.

http://twimgs.com/darkreading/securitymonitoring/S5991012netmonitoring.pdf?cid=nl_DR_weekly_2012-10-25_html_wp_top&elq=e0fdd256c3f94f07b39e89ea62644e68