Intrusion alert analysis is an attractive and active topic in the area of intrusion detection
systems. In recent decades, many research communities have been working in this field …

Current attacks are complex and stealthy. The recent WannaCry malware campaign
demonstrates that this is true not only for targeted operations, but also for massive attacks …

Looking at recent cyber-attacks in the news, a growing complexity and sophistication of
attack techniques can be observed. Many of these attacks are performed in multiple steps to …

Business Impact Analysis (BIA) assesses the effects of cyberattacks on critical business
processes and IT assets. Traditional BIAs are manual, relying on consultants to interview …

The identification of vulnerabilities relies on detailed information about the target
infrastructure. The gathering of the necessary information is a crucial step that requires an …

When looking at media reports nowadays, major security breaches of big companies and
governments seem to be a normal situation. An important step for the investigation or even …

Purpose This paper aims to propose a mobile agent-based security information and event
management architecture (MA-SIEM) that uses mobile agents for near real-time event …

The analysis of security-related event logs is an important step for the investigation of cyber-
attacks. It allows tracing malicious activities and lets a security operator find out what has …

Compliance requirements are part of everyday business requirements for various areas,
such as retail and medical services. As part of compliance it may be required to have …

Extracting correct and useful information from log messages is useful for real-time analysis
and detecting faults, anomalies and security threats. The semantics of the extracted …