A Dynamically Configurable Log-Based Distributed Security Event Detection Methodology Using Simple Event Correlator - Justin Myers
-20% with code BOOKS
30-day return policy
This research effort identifies attributes of distributed event correlation which make it desirable for security event detection, and evaluates those attributes in a comparison with a centralized alternative. Event correlation is an effective means of detecting complex situations encountered in information technology environments. Centralized, database-driven log event correlation is more commonly implement ... Full description
You May Also Like
TOP
Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones
-20% with code BOOKS
In stock
TOP
The Culture Map: Breaking Through the Invisible Boundaries of Global Business
-20% with code BOOKS
In stock
TOP
Prisoners of Geography: Updated 10th Anniversary Edition: Ten Maps That Tell You Everything You Need To Know About Global Politics
-20% with code BOOKS
In stock at our supplier
TOP
Classic Football Shirts
Classic Football Shirts, Rory Smith
-20% with code BOOKS
In stock at our supplier
TOP
Sapiens: A Brief History of Humankind
-20% with code BOOKS
In stock at our supplier
TOP
How Democracies Die
Steven Levitsky, Daniel Ziblatt
-20% with code BOOKS
In stock at our supplier
TOP
All about Love: New Visions
-20% with code BOOKS
In stock at our supplier
TOP
Everything I Know About Love: Now a Major BBC One Series
-20% with code BOOKS
In stock
TOP
Braiding Sweetgrass: Indigenous Wisdom, Scientific Knowledge and the Teachings of Plants
-20% with code BOOKS
In stock at our supplier
TOP
The Testaments: The Sequel to The Handmaid's Tale
-20% with code BOOKS
In stock at our supplier
TOP
World Travel: An Irreverent Guide
Anthony Bourdain, Laurie Woolever
-20% with code BOOKS
In stock at our supplier
TOP
Breaking Through: My Life in Science
-20% with code BOOKS
In stock at our supplier
TOP
The Next Conversation: Argue Less, Talk More
-20% with code BOOKS
In stock
TOP
The Will to Change: Men, Masculinity, and Love
-20% with code BOOKS
In stock at our supplier
TOP
Ungrounding: The Architecture of Genocide
-20% with code BOOKS
In stock at our supplier
TOP
Girl on Girl: How Pop Culture Turned a Generation of Women Against Themselves
-20% with code BOOKS
In stock at our supplier
Description
This research effort identifies attributes of distributed event correlation which make it desirable for security event detection, and evaluates those attributes in a comparison with a centralized alternative. Event correlation is an effective means of detecting complex situations encountered in information technology environments. Centralized, database-driven log event correlation is more commonly implemented, but suffers from flaws such as high network bandwidth utilization, significant requirements for system resources, and difficulty in detecting certain suspicious behaviors. This analysis measures the value in distributed event correlation by considering network bandwidth utilization, detection capability and database query efficiency, as well as through the implementation of remote configuration scripts and correlation of multiple log sources. These capabilities produce a configuration which allows a 99% reduction of network syslog traffic in the low-accountability case, and a significant decrease in database execution time through context-addition in the high-accountability case.
More Information
| Author | Justin Myers |
|---|---|
| Publisher | Creative Media Partners, LLC |
| Release year | 2012 |
| Cover type | Softcover |
| EAN | 9781249586876 |