logs, numerous false positive alerts and fragmented islands of defense."

He said this is why enterprises are turning to SIM, which turns raw

security data into useful information to monitor and enforce corporate

security policy. According to Sommer, ArcSight's SIM software, ArcSight

ESM (for enterprise security management) and can process data in a