Advanced search ?

Object

Download

Title: Detecting Security Violations Based on Multilayered Event Log Processing, Journal of Telecommunications and Information Technology, 2015, nr 4

Creator:

Kozakiewicz, Adam ; Lasota, Krzysztof ; Malec, Przemysław ; Piwowar, Anna

Date:

2015, nr 4

Resource Type:

artykuł

Description:

design. First layer, named the event source layer, describes sources of information that can be used for misuse investigation. Transport layer represents the method of collecting event data, preserving it in the form of logs and passing it to another layer, called the analysis layer. This third layer is responsible for analyzing the logs' content, picking relevant information and generating security alerts. Last layer, called normalization layer, is custom software which normalizes and correlates produced alerts to raise notice on more complex attacks. Logs from remote hosts are collected by using rsyslog software and OSSEC HIDS with custom decoders and rules is used on a central log server for log analysis. A novel method of handling OSSEC HIDS alerts by their normalization and correlation is proposed. The output can be optionally suppressed to protect the system against alarm flood and reduce the count of messages transmitted in the network.

Publisher:

National Institute of Telecommunications

Format:

application/pdf

Resource Identifier:

ISSN 1509-4553, on-line: ISSN 1899-8852 ; oai:bc.itl.waw.pl:1877

Source:

Journal of Telecommunications and Information Technology

Language:

ang

Rights Management:

Biblioteka Naukowa Instytutu Łączności

Subject and keywords:

log analysis NIDS HIDS syslog

Object collections:

Last modified:

Feb 23, 2016

In our library since:

Feb 23, 2016

Number of object content hits:

466

All available object's versions:

https://bc.itl.waw.pl/publication/2146

Show description in RDF format:

RDF

Show description in OAI-PMH format:

OAI-PMH

Edition name Date
Malec, Przemysławł; Piwowar, Anna; Kozakiewicz, Adam;Lasota, Krzysztof , Detecting Security Violations Based on Multilayered Event Log Processing, Journal of Telecommunications and Information Technology, 2015, nr 4 Feb 23, 2016

Objects Similar
Model of User Access Contro to Virtual Machines Based on RT-Family Trust Management Language with Temporal Validity Constraints – Practical Application, Journal of Telecommunications and Information Technology, 2012, nr 3

Kozakiewicz, Adam Lasota, Krzysztof

2012, nr 3
artykuł
Intrusion Detection in Heterogeneous Networks of Resource-Limited Things, Journal of Telecommunications and Information Technology, 2015, nr 4

Marks, Michał Kozakiewicz, Adam Lasota, Krzysztof

2015, nr 4
artykuł
A k-Nearest Neighbors Method for Classifying User Sessions in E-Commerce Scenario, Journal of Telecommunications and Information Technology, 2015, nr 3

Potempa, Aneta Skolimowska-Kulig, Magdalena Suchacka, Grażyna

2015, nr 3
artykuł
Optimization approach with ρ-proximal convexification for Internet traffic control, Journal of Telecommunications and Information Technology, 2005, nr 3

Kozakiewicz, Adam

2005, nr 3
artykuł
RTT+ – Time Validity Constraints in RT RTT Language, Journal of Telecommunications and Information Technology, 2012, nr 2

Kozakiewicz, Adam Felkner, Anna

2012, nr 2
artykuł
BSBI – a Simple Protocol for Remote Verification of Identity, Journal of Telecommunications and Information Technology, 2012, nr 3

Kozakiewicz, Adam Pałka, Tomasz

2012, nr 3
artykuł
Application of bioinformatics methods to recognition of network threats, Journal of Telecommunications and Information Technology, 2007, nr 4

Kruk, Tomasz Jordan Kijewski, Piotr Kozakiewicz, Adam Felkner, Anna

2007, nr 4
artykuł
More
×

Citation

Citation style:

Contact details

Address

Instytut Łączności – Państwowy Instytut Badawczy ul. Szachowa 1 04-894 Warszawa

Phone

(+48) 5128 696

E-Mail

biblioteka@il-pib.pl

Visit us!

This page uses 'cookies'. More information