Architecture of Anomaly Detection Module for the Security Operations Center

Bienias, P.; Kołaczek, Grzegorz; Warzyński, Arkadiusz

doi:10.1109/wetice.2019.00035

Search citation statements

Order By: Relevance

Paper Sections

Select...

Technology References1

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2020

2022

Publication Types

Select...

Book2

Other2

Article1

Relationship

Self Cite0

Independent5

Authors

Journals

Cited by 7 publications

(1 citation statement)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Data Collection [37], [47], [80], [103], [104], [107], [111], [127]- [132] Analysis & Detection [13], [35], [41], [43], [55], [56], [84], [133]- [157] Presentation [9], [12], [13], [80], [97], [99], [112], [127], [158]- [170] V-B2). As the interface between people and machines, the presentation of data and analysis results is of particular interest in a SOC context.…”

Section: Technology Referencesmentioning

confidence: 99%

Security Operations Center: A Systematic Study and Open Challenges

et al. 2020

View full text Add to dashboard Cite

Section: Technology Referencesmentioning

confidence: 99%

Security Operations Center: A Systematic Study and Open Challenges

et al. 2020

View full text Add to dashboard Cite

A Reference Architecture for Management of Security Operations in Digital Service Chains

Carrega¹,

Grieco

Striccoli

et al. 2022

Cybersecurity of Digital Service Chains

View full text Add to dashboard Cite

Modern computing paradigms (i.e., cloud, edge, Internet of Things) and ubiquitous connectivity have brought the notion of pervasive computing to an unforeseeable level, which boosts service-oriented architectures and microservices patterns to create digital services with data-centric models. However, the resulting agility in service creation and management has not been followed by a similar evolution in cybersecurity patterns, which still largely rest on more conventional device- and infrastructure-centric models.In this Chapter, we describe the implementation of the GUARD Platform, which represents the core element of a modern cybersecurity framework for building detection and analytics services for complex digital service chains. We briefly review the logical components and how they address scientific and technological challenges behind the limitations of existing cybersecurity tools. We also provide validation and performance analysis that show the feasibility and efficiency of our implementation.

show abstract