IBM unveils QRadar Vulnerability Manager security tool

IBM has launched new real-time security management tools, including its QRadar Vulnerability Manager (QVM), which it said combs through potential security flaws and presents them to security officers in a more manageable format.
QVM lists results from multiple security scanners alongside the latest X-Force Threat Intelligence reports and listings from the National Vulnerability Database to allow users to quickly get a grasp on which potential problems present the highest risk.
The software also includes an embedded, PCI-certified scanner, which can be scheduled to run periodically or triggered based on network events.
Brendan Hannigan, general manager at IBM Security Systems said the firm's new product launch was a timely one. "Traditional vulnerability management solutions are fundamentally broken," he explained. "Vulnerability scanning today lacks network-wide visibility, contextual awareness and real-time scanning. These gaps mean even well-known and preventable vulnerabilities can be lost in an overload of data, leaving organisations exposed to high risks."
Murray Benadie, managing director of IBM partner Zenith Systems said he believed the new software was significant. "It can cut a huge list of vulnerabilities in half, if not more," he said. "Users will quickly see vulnerabilities on their networks, without trying to mash products together – that is how information falls through the cracks."
In addition, the firm announced that it would be enhancing its intrusion prevention platforms with the introduction of IBM Security Network Protection XGS 5100, which includes better detection of SSL-based attacks. The update also allows security officers to issue a "virtual patch"; technology which provides protection from ongoing unpatched security flaws.
On Friday, IBM revealed its Q2 2013 financial results, with profits seeing a drop but its mainframe and software departments experiencing growth.