VCA Stocks

ArcSight, Inc. (ARST) VCA Stocks: Misc Sectors -> Security -> Computer Network Security

5 Day Chart -- 6 Month Chart -- 2 Year Chart -- 5 Year Chart

ArcSight, Inc. is a provider of enterprise threat and risk management solutions that protect business and government enterprises.

The enterprise threat and risk management platform collects, consolidates and correlates network and user activity data across the enterprise so that businesses could detect, diagnose and manage both internal and external threats and risks across the organization for activities associated with assets and processes. With the enterprise threat and risk management platform and products, organizations could use the ArcSight platform to protect their digital assets from cyber-theft, cyber-fraud, cyber-warfare and cyber-episonage. The enterprise threat and risk management platform includes the connector products, which collect event information from security point solutions, network and computing devices, databases, applications and other elements in an organization’s information technology (IT) architecture.

The primary components of the enterprise threat and risk management platform are the SIEM products, ArcSight ESM and ArcSight Express, and the ArcSight Logger range of log management products. ArcSight ESM is designed to address the compliance, security and business risk concerns of organizations. The elements within ArcSight ESM include ArcSight Manager, ArcSight Console, ArcSight Console, ArcSight Web and ArcSight Viewer.

ArcSight Manager, available as software or as an appliance, manages event aggregation and storage, controls the various elements of the platform and provides the engine for correlation and incident response workflow. ArcSight Manager enables collaboration and case management among security analysts, to track response and remediation. The case management system also could integrate with third-party trouble ticketing systems, such as the Remedy Service desk system from BMC Software.

ArcSight Console is the primary user interface to interact with and control ArcSight ESM. The Console provides administrators, analysts and operators with graphical data summaries and an interface to perform tasks ranging from monitoring and analysis to incident investigation and response to system administration and authoring of new content. With ArcSight Console, customers could run a range of reports to answer internal and external compliance audits and communicate the organization’s security operations. It also provides an authoring system that customers could use to create new reports to meet their specific business needs. ArcSight ESM contains report templates that address common compliance, security and business risk reporting requirements. To facilitate remote access for IT administrators, as well as provide a portal for line-of-business viewing of status summaries and scheduled reports, the ArcSight Web product provides browser-based access to all Console functions and content, except administration and authoring, and the ArcSight Viewer product provides browser-based, read-only access to all Console content.

ArcSight Logger, the suite of log management products, enables organizations to collect and store event data in support of security and compliance requirements. It is available in a range of feature sets and capacities either as software or one or more appliances. ArcSight Logger provides customers with a searchable log data repository, together with reporting capabilities. As with ArcSight ESM, ArcSight Logger provides administrators, analysts and operators with graphical data summaries and an intuitive interface to perform search, reporting and management tasks. Access controls and intelligent search technology enable customers to interact with historical raw event data for insight into specific events. ArcSight Logger captures raw logs at sustained rates of up to 100,000 events per second per appliance and provides approximately 10:1 compression capability for event data, storing 40 terabytes or more of data on a single appliance.

ArcSight Logger software could be deployed on multiple servers, or multiple appliances can be deployed, to linearly scale both storage and performance. Organizations with multiple administrative domains or managed security service providers could choose to deploy multiple ArcSight Logger installations or appliances in a hierarchical or peer-to-peer manner to extend capacity and performance as needed. ArcSight Logger could forward security events to ArcSight ESM for correlation, visualization and threat detection. In turn, ArcSight ESM could send correlated alerts back to ArcSight Logger for archiving and subsequent retrieval.

ArcSight Express is a set of SIEM and log management appliances designed for organizations with fewer resources for managing a network security and compliance program. ArcSight Express includes many of the same correlation functions as ArcSight ESM, and many of the same log management functions of ArcSight Logger. ArcSight Express includes pre-built rules, reports, and dashboards for monitoring network security, user activity and regulatory compliance.

Connectors collect event data streams from sources across an organization’s business and technology infrastructure and feed that event data to the ESM, ArcSight Logger, ArcSight Express and ArcSight FraudView products. The connectors are available as software or appliances, which available in a range of feature sets and throughput capacities. These connectors implement normalization and categorization capabilities to restructure event data into a common taxonomy so events from hundreds of different sources could be compared and queried systematically irrespective of which device is reporting the information. The normalized event data stream is then intelligently aggregated and compressed to eliminate irrelevant and duplicate messages and reduce bandwidth and storage consumption. The SmartConnectors receive and translate event data streams from over 300 different devices and applications from more than 100 vendors and in more than 36 different solution categories. Further, using the FlexConnector toolkit, the customers could create connectors tailored to their environment, such as for new products, applications and mainframe and other legacy systems. The connectors could be deployed on intermediate collection points, such as third-party management consoles, where available, avoiding the requirement to provision the connectors directly onto end devices.

ArcSight IdentityView is a software application, which enables customers to detect increased risk from activities performed by employees, contractors and other users of internal corporate systems. It allows enterprise customers to address insider threat and fraud risks as well as compliance and audit needs. IdentityView includes specialized connectors to leading identity and access management (IAM), systems and directories and pre-built capabilities for correlating multiple user accounts to a single identity. From that, pre-built or user-defined rules for fraud detection and unauthorized actions analyze this information to determine if the user is performing unauthorized activities. The pre-packaged reports and dashboards include access rights and group membership analysis, user risk analysis by department or job function and comprehensive activity reporting for any user over any time period. IdentityView also utilizes the technology underlying the ArcSight Threat Detector module to automatically create new risk profiles employing IAM information.

The ArcSight FraudView appliance enables the financial services customers to detect and prevent or mitigate online fraud by evaluating and scoring financial transactions in real-time (rather than simply performing after the fact forensic analysis). ArcSight NCM is an appliance that automates the audit of network topology, maintaining protected records of all configurations.

The Company competes with LogLogic, NitroSecurity, Q1 Labs, SenSage, EMC, IBM, Novell and Symantec.

More Information for ArcSight, Inc. (ARST):

Company Website - http://www.arcsight.com
All-in-One Message Board from TheLion - Message Boards
SEC Quarterly Filings - SEC 10-Q
SEC Annual Filings - SEC 10-K
Conference Calls from Thomson Financial - Thomson StreetEvents
Conference Call Transcripts from SeekingAlpha.com - SeekingAlpha.com Transcripts
Insider Trading and Chart from Nasdaq - Insider Purchases and Sales
Reuters Finance Info - Reuters Profile
Yahoo Finance Info - Yahoo Finance
MSN Money Info - MSN Money
Google Finance Info - Google Finance
CBS MarketWatch Info - CBS MarketWatch
Google News Search - Google News
Google Blog Search - Google Blog Search
Motley Fool - Motley Fool Caps
TheStreet.com' Stockpickr - Stockpickr Holdings
Bloomberg - Bloomberg News