Shulou(Shulou.com)06/01 Report--

Gartner's annual SIEM magic quadrant report was released on May 7, 2013. As shown below:

Compare last year's MQ matrix:

In short, the number of manufacturers on the list decreased to 16, Q1Labs had a slight upper hand in the top three competition, Arcsight regressed, Splunk finally entered the first camp, while Novell retreated to the second line, and Symantec continued to decline.

Specifically, in fact, it is basically consistent with my previous analysis, and the SIEM development of several manufacturers that we are familiar with in China have encountered some setbacks. And this has long been apparent.

1) it was RSA enVision's turn to become the most complained SIEM product in 2012. The main reason is his query performance and report performance, so many users turn to other alternative products. Gartner confirmed the fact that enVision was being replaced by Security Analytics and said enVision would be delisted in mid-2016.

2) HP ArcSight mainly rebuilt his ESM backend database from 2011 to 2012, replacing the previously controversial Oralce with the lightweight database CORR, and launched ESM6.0c, which improved a lot. But even so, the complexity of system deployment and implementation is still higher than that of other competitors. At the same time, Arcsight also lags behind the other two giants in the application of new SIEM technologies that represent the future.

3) for NetIQ, the main theme of 2012 is integration, which integrates Novell Sentinel with existing SIEM products and is mediocre in competition, so it withdraws from the second camp.

4) given that Symantec's technology investment in its SIEM products has been mediocre over the past few years, its performance has also continued to decline. Symantec also timely adjusted the marketing strategy of its SSIM products, bundling SSIM with SEP and selling with other Symantec products. I personally estimate that the performance could have been worse without the help of other Symantec products.

In 2012, Gartner expects SIEM's global market performance to reach $1.36 billion. At the same time, the market concentration has further increased, with five large manufacturers sharing 60% of the share. Gartner also raised the entry threshold for MQ analysis this year, requiring at least $13.5 million in performance.

[reference]

Gartner: 2012 SIEM (Security Information and incident Management) Market Analysis report

Gartner releases 2011 SIEM Market Analysis report (Magic Square Chart)

Comment on Gartner2010 Annual Security Information and incident Management (SIEM) Analysis report

Gartner's Analysis of Security Information and incident Management (SIEM) in 2009

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.