Detailed Information on Publication Record
2017
A Graph-based Representation of Relations in Network Security Alert Sharing Platforms
HUSÁK, Martin and Milan ČERMÁKBasic information
Original name
A Graph-based Representation of Relations in Network Security Alert Sharing Platforms
Authors
HUSÁK, Martin (203 Czech Republic, guarantor, belonging to the institution) and Milan ČERMÁK (203 Czech Republic, belonging to the institution)
Edition
Lisbon, 2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM), p. 891-892, 2 pp. 2017
Publisher
IEEE
Other information
Language
English
Type of outcome
Stať ve sborníku
Field of Study
Informatics
Country of publisher
United States of America
Confidentiality degree
není předmětem státního či obchodního tajemství
Publication form
electronic version available online
References:
RIV identification code
RIV/00216224:14610/17:00094469
Organization
Ústav výpočetní techniky – Repository – Repository
ISBN
978-3-901882-89-0
Keywords in English
graph;security alert;information sharing
Links
MUNI/A/0997/2016, interní kód Repo. VI20162019029, research and development project.
Změněno: 4/9/2020 02:54, RNDr. Daniel Jakubík
Abstract
V originále
In this paper, we present a framework for graph-based representation of relation between sensors and alert types in a security alert sharing platform. Nodes in a graph represent either sensors or alert types, while edges represent various relations between them, such as common type of reported alerts or duplicated alerts. The graph is automatically updated, stored in a graph database, and visualized. The resulting graph will be used by network administrators and security analysts as a visual guide and situational awareness tool in a complex environment of security alert sharing.