A Graph-based Representation of Relations in Network Security Alert Sharing Platforms

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14610%2F17%3A00094469" target="_blank" >RIV/00216224:14610/17:00094469 - isvavai.cz</a>

Result on the web

<a href="http://ieeexplore.ieee.org/document/7987399/" target="_blank" >http://ieeexplore.ieee.org/document/7987399/</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.23919/INM.2017.7987399" target="_blank" >10.23919/INM.2017.7987399</a>

Result language

angličtina

Original language name

A Graph-based Representation of Relations in Network Security Alert Sharing Platforms

Original language description

In this paper, we present a framework for graph-based representation of relation between sensors and alert types in a security alert sharing platform. Nodes in a graph represent either sensors or alert types, while edges represent various relations between them, such as common type of reported alerts or duplicated alerts. The graph is automatically updated, stored in a graph database, and visualized. The resulting graph will be used by network administrators and security analysts as a visual guide and situational awareness tool in a complex environment of security alert sharing.

Czech name

—

Czech description

—

Type

D - Article in proceedings

CEP classification

—

OECD FORD branch

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Project

<a href="/en/project/VI20162019029" target="_blank" >VI20162019029: Sharing and analysis of security events in Czech Republic</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year

2017

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection

2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)

ISBN

9783901882890

ISSN

—

e-ISSN

—

Number of pages

2

Pages from-to

891-892

Publisher name

IEEE

Place of publication

Lisbon

Event location

Lisbon

Event date

May 8, 2017

Type of event by nationality

WRD - Celosvětová akce

UT code for WoS article

—