<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The SIEM, Log Management, and Risk Management Blog</title>
	<atom:link href="http://blog.q1labs.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.q1labs.com</link>
	<description>Q1 Blog leverages the experience of the industry&#039;s best minds and delivers the critical intelligence you need to keep your network safe.</description>
	<lastBuildDate>Wed, 16 May 2012 17:39:04 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1.4</generator>
		<item>
		<title>Back to the Future in the UK- DDoS attacks gain fresh media exposure</title>
		<link>http://blog.q1labs.com/2012/05/16/back-to-the-future-in-the-uk/</link>
		<comments>http://blog.q1labs.com/2012/05/16/back-to-the-future-in-the-uk/#comments</comments>
		<pubDate>Wed, 16 May 2012 13:35:49 +0000</pubDate>
		<dc:creator>Tom Kendall</dc:creator>
				<category><![CDATA[Cybersecurity]]></category>
		<category><![CDATA[Security Intelligence]]></category>
		<category><![CDATA[SIEM]]></category>
		<category><![CDATA[breaches]]></category>
		<category><![CDATA[data breach]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=2982</guid>
		<description><![CDATA[As we have lately read and seen, the style and sophistication of cyber attacks on organizations&#8217; networks have become ever more complex. One type of attack that has had a lot of media coverage in the UK are DDoS attacks, with hacktivists using multiple IP addresses to attack one IP address within an organization, resulting [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/05/16/back-to-the-future-in-the-uk/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Look Ma, I found security! Or, just Another Brick in the Wall</title>
		<link>http://blog.q1labs.com/2012/05/15/look-ma-i-found-security-or-just-another-brick-in-the-wall/</link>
		<comments>http://blog.q1labs.com/2012/05/15/look-ma-i-found-security-or-just-another-brick-in-the-wall/#comments</comments>
		<pubDate>Tue, 15 May 2012 14:34:02 +0000</pubDate>
		<dc:creator>John Burnham</dc:creator>
				<category><![CDATA[Threat Management]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=3026</guid>
		<description><![CDATA[According to a UK news website,  the CEO of a large, really large, hardware vendor just noticed that the world is being ravaged by terrorists, and warned that a &#8221;cyber-attack of 9/11 scale&#8221; is likely to take place in the near future. So now the terrorists are using cyber attacks. Hhmmm&#8230;selling security with FUD is not even [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/05/15/look-ma-i-found-security-or-just-another-brick-in-the-wall/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Advanced Persistent Underpants</title>
		<link>http://blog.q1labs.com/2012/05/10/advanced-persistent-underpants/</link>
		<comments>http://blog.q1labs.com/2012/05/10/advanced-persistent-underpants/#comments</comments>
		<pubDate>Thu, 10 May 2012 15:45:29 +0000</pubDate>
		<dc:creator>Tom Turner</dc:creator>
				<category><![CDATA[Cybersecurity]]></category>
		<category><![CDATA[Security Intelligence]]></category>
		<category><![CDATA[Threat Management]]></category>
		<category><![CDATA[advanced persistent threats]]></category>
		<category><![CDATA[breaches]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=3007</guid>
		<description><![CDATA[I think we can laugh because it was foiled, but we should be chastened that it even exists as a potential threat.  What a topical parallel  to draw with the daily fight waged by information security professionals.  What an analogy to illustrate the need for sophisticated intelligence gathering and analysis &#8212; and the reason why traditional [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/05/10/advanced-persistent-underpants/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Webinar Wrap-up: Continuous Monitoring and Real Time Risk Scoring</title>
		<link>http://blog.q1labs.com/2012/05/01/webinar-wrap-up-continuous-monitoring-and-real-time-risk-scoring/</link>
		<comments>http://blog.q1labs.com/2012/05/01/webinar-wrap-up-continuous-monitoring-and-real-time-risk-scoring/#comments</comments>
		<pubDate>Tue, 01 May 2012 14:34:19 +0000</pubDate>
		<dc:creator>Heather Howland</dc:creator>
				<category><![CDATA[Federal]]></category>
		<category><![CDATA[Security Intelligence]]></category>
		<category><![CDATA[Webinars]]></category>
		<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[government]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=2826</guid>
		<description><![CDATA[Government agencies, like their private sector brethren, are knee deep in IT security challenges, threats, and regulations. While that&#8217;s not much of a shock, this might be &#8211; according to the Government Accountability Office, the number of reported security incidents increased by over 650 percent during fiscal years 2006–2010. At the same time, government agencies [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/05/01/webinar-wrap-up-continuous-monitoring-and-real-time-risk-scoring/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IBM Announces Network Threat Analytics – Purpose-Built for IBM Network IPS</title>
		<link>http://blog.q1labs.com/2012/04/27/ibm-announces-network-threat-analytics-%e2%80%93-purpose-built-for-ibm-network-ips/</link>
		<comments>http://blog.q1labs.com/2012/04/27/ibm-announces-network-threat-analytics-%e2%80%93-purpose-built-for-ibm-network-ips/#comments</comments>
		<pubDate>Sat, 28 Apr 2012 00:32:52 +0000</pubDate>
		<dc:creator>Phil Neray</dc:creator>
				<category><![CDATA[Network Intelligence]]></category>
		<category><![CDATA[Security Intelligence]]></category>
		<category><![CDATA[Threat Management]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=2972</guid>
		<description><![CDATA[Earlier this week, IBM announced a network behavioral analysis (NBA) extension for its Network IPS offering which is based on the QRadar Security Intelligence platform. Using advanced behavioral analytics and anomaly detection, the new QRadar Network Anomaly Detection appliance continuously analyzes network traffic in real-time — using deep packet inspection and passive monitoring of Layer [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/04/27/ibm-announces-network-threat-analytics-%e2%80%93-purpose-built-for-ibm-network-ips/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Around the Web &#8211; Information Security Infographics Part 2</title>
		<link>http://blog.q1labs.com/2012/04/26/around-the-web-information-security-infographics-part-2/</link>
		<comments>http://blog.q1labs.com/2012/04/26/around-the-web-information-security-infographics-part-2/#comments</comments>
		<pubDate>Thu, 26 Apr 2012 14:01:21 +0000</pubDate>
		<dc:creator>Melissa Stevens</dc:creator>
				<category><![CDATA[Cloud Security]]></category>
		<category><![CDATA[Cybersecurity]]></category>
		<category><![CDATA[application security]]></category>
		<category><![CDATA[cloud security]]></category>
		<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[device security]]></category>
		<category><![CDATA[infographic]]></category>
		<category><![CDATA[social media security]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=2933</guid>
		<description><![CDATA[Last October I posted a list of my favorite information security themed infographics, and would you believe it (?!), our readers seem to love these graphics just as much as I do!  So, for your viewing pleasure, I have curated 10 new information security infographics that have appeared online since January 2012, covering topics ranging [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/04/26/around-the-web-information-security-infographics-part-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Notes from FOSE: Continuous Monitoring = Security Intelligence</title>
		<link>http://blog.q1labs.com/2012/04/12/notes-from-fose-continuous-monitoring-security-intelligence/</link>
		<comments>http://blog.q1labs.com/2012/04/12/notes-from-fose-continuous-monitoring-security-intelligence/#comments</comments>
		<pubDate>Thu, 12 Apr 2012 17:50:23 +0000</pubDate>
		<dc:creator>Chris Poulin</dc:creator>
				<category><![CDATA[Compliance]]></category>
		<category><![CDATA[Federal]]></category>
		<category><![CDATA[Security Intelligence]]></category>
		<category><![CDATA[SIEM]]></category>
		<category><![CDATA[Cybersecurity]]></category>
		<category><![CDATA[FISMA]]></category>
		<category><![CDATA[FOSE]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=2903</guid>
		<description><![CDATA[Last week I participated in a panel on Continuous Monitoring at FOSE. Joining me were Mark Crouter from MITRE as the moderator, John &#8220;Rick&#8221; Walsh, chief of technology and business processes in the Cybersecurity Directorate of the Army&#8217;s Office of the CIO, and Angela Orebaugh, Fellow and Senior Associate at Booz Allen Hamilton. Auspicious company [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/04/12/notes-from-fose-continuous-monitoring-security-intelligence/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Security Week Excerpt: Security Superstition</title>
		<link>http://blog.q1labs.com/2012/04/11/security-week-excerpt-security-superstition/</link>
		<comments>http://blog.q1labs.com/2012/04/11/security-week-excerpt-security-superstition/#comments</comments>
		<pubDate>Wed, 11 Apr 2012 14:45:00 +0000</pubDate>
		<dc:creator>Melissa Stevens</dc:creator>
				<category><![CDATA[Cybersecurity]]></category>
		<category><![CDATA[Security Intelligence]]></category>
		<category><![CDATA[SIEM]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=2918</guid>
		<description><![CDATA[Have your security practices been guided by old wives&#8217; tales and horror stories of installations past? In this article for Security Week, Chris Poulin explains why it&#8217;s time to revisit your security posture, especially when it comes to SIEM and Security Intelligence. Don&#8217;t let superstition influence your strategy! &#160; &#160; &#8220;Another area where superstitious habits [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/04/11/security-week-excerpt-security-superstition/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Know Your Users: Using QRadar SIEM for User Activity Monitoring</title>
		<link>http://blog.q1labs.com/2012/03/29/know-your-users-using-qradar-siem-for-user-activity-monitoring/</link>
		<comments>http://blog.q1labs.com/2012/03/29/know-your-users-using-qradar-siem-for-user-activity-monitoring/#comments</comments>
		<pubDate>Thu, 29 Mar 2012 16:06:12 +0000</pubDate>
		<dc:creator>Michael Applebaum</dc:creator>
				<category><![CDATA[Cybersecurity]]></category>
		<category><![CDATA[Network Intelligence]]></category>
		<category><![CDATA[SIEM]]></category>
		<category><![CDATA[Threat Management]]></category>
		<category><![CDATA[correlation]]></category>
		<category><![CDATA[identity management]]></category>
		<category><![CDATA[Insider Threat]]></category>
		<category><![CDATA[user monitoring]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=2849</guid>
		<description><![CDATA[You know that QRadar SIEM excels at collecting, correlating and reporting on unusual activity, but have you ever wondered how it performs user activity monitoring?  Or what value this would have for your organization? In this new 8-minute YouTube demo, we look at how the integration of identity and access management data enables real-time user activity [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/03/29/know-your-users-using-qradar-siem-for-user-activity-monitoring/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Clients Reveal the Meaning and Value of Security Intelligence</title>
		<link>http://blog.q1labs.com/2012/03/26/clients-reveal-the-meaning-and-value-of-security-intelligence/</link>
		<comments>http://blog.q1labs.com/2012/03/26/clients-reveal-the-meaning-and-value-of-security-intelligence/#comments</comments>
		<pubDate>Mon, 26 Mar 2012 13:33:54 +0000</pubDate>
		<dc:creator>Michael Applebaum</dc:creator>
				<category><![CDATA[Cybersecurity]]></category>
		<category><![CDATA[In the Industry]]></category>
		<category><![CDATA[Security Intelligence]]></category>
		<category><![CDATA[IBM]]></category>
		<category><![CDATA[SIEM]]></category>

		<guid isPermaLink="false">http://blog.q1labs.com/?p=2794</guid>
		<description><![CDATA[We’ve written extensively in this blog about what Security Intelligence means in concept and practice.  As a new solution category, it benefits from wide discussion and exploration.  My colleague Chris Poulin recently shared Security Intelligence insights from a client and partner panel he moderated at IBM Pulse 2012, where Security Intelligence was a pervasive theme.  [...]]]></description>
		<wfw:commentRss>http://blog.q1labs.com/2012/03/26/clients-reveal-the-meaning-and-value-of-security-intelligence/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

