An analysis of information security event managers
The most effective security starts with real time visibility into all activity on all systems,
networks, database and applications. In this paper the focus in on structured data however …
networks, database and applications. In this paper the focus in on structured data however …
A high-level domain-specific language for SIEM (design, development and formal verification)
Organizations deploy security information and event management (SIEM) systems for
centralized management of security events. The real-time security monitoring capability of …
centralized management of security events. The real-time security monitoring capability of …
A hybrid machine learning method for intrusion detection
Data security is an important area of concern for every computer system owner. An intrusion
detection system is a device or software application that monitors a network or systems for …
detection system is a device or software application that monitors a network or systems for …
Association analysis of cyber-attack attribution based on threat intelligence
This paper presented an association analysis method in cyber-attack attribution based on
threat intelligence. The method used the local advantage model to analyse the data related …
threat intelligence. The method used the local advantage model to analyse the data related …
An approach for scale suspicious network events detection
Detecting the real suspicious events from a large number of low-quality alerts is a severe
challenge to the security operations center teams. In this paper, we present an approach to …
challenge to the security operations center teams. In this paper, we present an approach to …
[PDF][PDF] Distributed log analysis for scenario-based detection of multi-step attacks and generation of near-optimal defense recommendations
K Kaynar - 2017 - depositonce.tu-berlin.de
Detecting related, ongoing actions of attackers is significant for providing a complete
situational assessment of security and determining the most effective reactive defense …
situational assessment of security and determining the most effective reactive defense …
[PDF][PDF] Enabling Big Data security analytics for advanced network attack detection
D Jaeger - 2018 - researchgate.net
The last years have shown an increasing sophistication of attacks against enterprises.
Traditional security solutions like firewalls, anti-virus systems and generally Intrusion …
Traditional security solutions like firewalls, anti-virus systems and generally Intrusion …