Huawei, the Only Vendor in China Listed in Gartner® Magic Quadrant for SIEM for the Third Year in a Row
Aug 29, 2024
Huawei has recently been listed in the 2024 Gartner Magic Quadrant™ for Security Information and Event Management (SIEM) again. This makes Huawei the only Chinese vendor to have won this recognition for the third consecutive year. Huawei attributes this recognition to its innovative product SecMaster and the excellent service provided around the world.
According to the report, Gartner performed a fine-grained, in-depth survey of nearly 200 items covering over 20 key capabilities and core functions of SIEM products from global vendors.
Huawei Cloud SecMaster is well known in the global market for its excellent threat detection techniques, powerful security orchestration, automation and response (SOAR) capabilities, as well as intelligent big data analysis and observable security situation awareness. For Huawei, this is not only full recognition of the technical expertise and innovation that has gone into SecMaster but also concrete proof of successful implementation of its global service strategy.
As the core of Huawei Cloud's "one center + seven layers of defense" security architecture, SecMaster integrates Huawei's over 30 years of experience in security operations to help customers build security operations centers (SOCs) with the same capabilities as Huawei Cloud does. SecMaster is a must-have for routine security operations, key event assurance, cybersecurity drills, security assessment, security hardening, and more. It makes easier for customers to keep their workloads on the cloud secure and legally compliant.
Through continuous technological innovation and optimization, SecMaster now integrates comprehensive situational awareness, in-depth intelligent analysis, and efficient automatic responses. Leveraging the advantages of a cloud native architecture and a unified cloud technology stack, SecMaster promotes more intelligent, more efficient security operations. It provides a secure fortress for Huawei Cloud customers.
"Five Ones" for Intelligent, Integrated Security Operations
· One screen where you can see everything. In terms of security situation awareness, SecMaster provides a unified cloud platform for customers to check risks, attacks, responses, and to-do tasks in a timely manner.
· One cloud for intelligent analysis of all threats. SecMaster provides global association analysis, more than 200 preconfigured alert models, and intelligent algorithms to reduce alarm noise. The alert models preconfigured in SecMaster can cut daily alerts from more than 500,000 to about 200, a noise reduction of 99%. SecMaster also works with other cloud security services in real time and performs alert association analysis across seven layers of defense, so threats have nowhere to hide.
· One-stop risk handling. SecMaster has more than 30 preconfigured playbooks, with 99% of alerts handled automatically. SecMaster also supports third-party playbooks as well as custom playbooks created from the preconfigured playbooks. SecMaster has integrated SOAR. So that in just a few clicks, security policies can be delivered, threats prevented, and incidents handled.
· One-click asset management. SecMaster synchronizes assets on and off the cloud in just a few clicks. It centrally manages asset risks, threats, and vulnerabilities.
· One-click security compliance assistance. SecMaster provides Huawei's global security compliance experience as a service. Customers can easily get analysis reports on their compliance with major standards, including PCI DSS, ISO 27701, and ISO 27001. So that they can make rectifications and quickly comply with security and privacy protection requirements on the cloud.
An open ecosystem for on- and off-cloud management
SecMaster is a part of a highly open ecosystem. It can be used together many partner solutions to provide even more comprehensive security solutions. SecMaster manages all assets on the cloud and seamlessly integrates with varied types of Huawei Cloud security services. So, it can analyze cloud data thoroughly, dig out threats efficiently, and responds to security events quickly, keeping the entire cloud environment secure. For assets off the cloud, SecMaster can aggregate security data from a wide range of on-premises security services and devices via open protocols and APIs. In this way, SecMaster provides a comprehensive security system that enables more comprehensive, efficient, intelligent security assurance.
AI for Security Operations
SecMaster always keeps pace with emerging technologies. It leverages AI to make security operations more intelligent. By combining training and inference capabilities of SLMs and LLMs, SecMaster can detect vulnerabilities quickly and identify potential threats automatically, giving customers improved observability. SecMaster helps improve security operations efficiency significantly thanks to interactive analysis, incident response, and event source tracing provided by LLMs. With SecMaster, one security operations expert can contribute as much as a security expert team of at least 10 persons used to.
In the future, Huawei Cloud will continue working with global customers and partners to build a more extensive and in-depth SIEM ecosystem to meet security requirements of global customers in a variety of scenarios and environments.
Gartner, Magic Quadrant for Security Information and Event Management, 8 May 2024
Gartner Disclaimer:
Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Gartner is a registered trademark and service mark of Gartner and Magic Quadrant is a registered trademark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.