Publica
Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten. Network and topology models to support IDS event processing
| Mori, P. ; IEEE Systems, Man and Cybernetics Society -SMC-; Institute for Systems and Technologies of Information, Control and Communication -INSTICC-, Setubal:
ICISSP 2017, 3rd International Conference on Information Systems Security and Privacy. Proceedings : Porto, Portugal, February 19-21, 2017
SciTePress, 2017
ISBN: 978-989-758-209-7
pp.372-379 |
| International Conference on Information Systems Security and Privacy (ICISSP) <3, 2017, Porto> |
| European Commission EC
FP7-SECURITY; 607093; PREEMPTIVE
PREVENTIVE METHODOLOGY AND TOOLS TO PROTECT UTILITIES |
|
| English |
| Conference Paper |
| Fraunhofer IOSB () |
| intrusion detection; network modeling; network awareness; YANG |
Abstract
This paper describes our work on network models to provide awareness to the process of correlating network security alerts as well as to support the asset assessment process within the security analysis of IT infrastructures. Various means of discovery methods mostly known from network management are used to discover nodes, their properties as well as the links connecting the nodes and building a network. Our implementation is based on existing open source components which have been integrated together and are using an information model according to proposed open standards.