rus
Issue #4/2024
E.I.Larionova, M.A.Studyannikova
Development of SIEM-systems correlation rule generation system
Development of SIEM-systems correlation rule generation system
DOI: 10.22184/2070-8963.2024.120.4.74.79
The modern information security monitoring systems are analysed and the MaxPatrol SIEM-system is selected. The principles of event processing in the system are described, and the algorithm of correlation rules building is shown. The architecture, interface and modules of the system are developed.
The modern information security monitoring systems are analysed and the MaxPatrol SIEM-system is selected. The principles of event processing in the system are described, and the algorithm of correlation rules building is shown. The architecture, interface and modules of the system are developed.
Теги: information security is monitoring systems siem (security information and event management) systems siem-system maxpatrol. siem-система maxpatrol информационная безопасность системы siem (security information and event management) системы мониторинга иб
Development of SIEM-systems correlation rule generation system
Readers feedback
