A Dynamically Configurable Log-Based Distributed Security Event Detection Methodology Using Simple Event Correlator - Justin Myers
-30% koodiga BOOKS
30-päevane tagastamisõigus
This research effort identifies attributes of distributed event correlation which make it desirable for security event detection, and evaluates those attributes in a comparison with a centralized alternative. Event correlation is an effective means of detecting complex situations encountered in information technology environments. Centralized, database-driven log event correlation is more commonly implement ... Täielik kirjeldus
Võib-olla meeldib sulle ka
TOP
Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones
-30% koodiga BOOKS
Laos
TOP
The Culture Map: Breaking Through the Invisible Boundaries of Global Business
-30% koodiga BOOKS
Laos
TOP
Women Who Run with the Wolves: Myths and Stories of the Wild Woman Archetype
Clarissa Pinkola Estés, Clarissa Pinkola Estes
-30% koodiga BOOKS
Meie tarnija laos
TOP
Prisoners of Geography: Updated 10th Anniversary Edition: Ten Maps That Tell You Everything You Need To Know About Global Politics
-30% koodiga BOOKS
Meie tarnija laos
TOP
How Democracies Die
Steven Levitsky, Daniel Ziblatt
-30% koodiga BOOKS
Meie tarnija laos
TOP
Classic Football Shirts
Classic Football Shirts, Rory Smith
-30% koodiga BOOKS
Meie tarnija laos
TOP
Goliath's Curse: The History and Future of Societal Collapse
-30% koodiga BOOKS
Meie tarnija laos
TOP
The Whole-Brain Child: 12 Revolutionary Strategies to Nurture Your Child's Developing Mind
Daniel J. Siegel, Tina Payne Bryson
-30% koodiga BOOKS
Meie tarnija laos
TOP
Everything I Know About Love: Now a Major BBC One Series
-30% koodiga BOOKS
Laos
TOP
Braiding Sweetgrass: Indigenous Wisdom, Scientific Knowledge and the Teachings of Plants
-30% koodiga BOOKS
Meie tarnija laos
TOP
The Testaments: The Sequel to The Handmaid's Tale
-30% koodiga BOOKS
Meie tarnija laos
Kirjeldus
This research effort identifies attributes of distributed event correlation which make it desirable for security event detection, and evaluates those attributes in a comparison with a centralized alternative. Event correlation is an effective means of detecting complex situations encountered in information technology environments. Centralized, database-driven log event correlation is more commonly implemented, but suffers from flaws such as high network bandwidth utilization, significant requirements for system resources, and difficulty in detecting certain suspicious behaviors. This analysis measures the value in distributed event correlation by considering network bandwidth utilization, detection capability and database query efficiency, as well as through the implementation of remote configuration scripts and correlation of multiple log sources. These capabilities produce a configuration which allows a 99% reduction of network syslog traffic in the low-accountability case, and a significant decrease in database execution time through context-addition in the high-accountability case.
Lisateave
| Autor | Justin Myers |
|---|---|
| Kirjastaja | Creative Media Partners, LLC |
| Väljalaskeaasta | 2012 |
| Kaanetüüp | Pehme kaanega |
| EAN | 9781249586876 |