Warden: system for online exchange of security events

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F63839172%3A_____%2F13%3A10130243" target="_blank" >RIV/63839172:_____/13:10130243 - isvavai.cz</a>

Result on the web

<a href="http://www.secure.edu.pl/pdf/2013/D1_1445_C_Kacha.pdf" target="_blank" >http://www.secure.edu.pl/pdf/2013/D1_1445_C_Kacha.pdf</a>

DOI - Digital Object Identifier

—

Result language

angličtina

Original language name

Warden: system for online exchange of security events

Original language description

The Warden project serves as simple platform for sharing detected security events, which can be used by its connected members to prepare for possible security threats. Beside security issues reported manually by 3rd parties, there exists large body of automatically detected security events, be it honeypot machines or IDS systems at campuses, golden mine of netflow data or dictionary attacks from log data of production machines. Manual distribution of this events is laborious and generates further work which CSIRT teams are usually not able to cover, causing distortion, losses and unneeded delays. In our CESNET2 network, we attempted to solve these dilemmas by designing the Warden software platform, which enables security teams to proactively and efficiently share and use information relating to detected network and service anomalies that had been generated by various systems.

Czech name

—

Czech description

—

Type

A - Audiovisual production

CEP classification

IN - Informatics

OECD FORD branch

—

Project

<a href="/en/project/LM2010005" target="_blank" >LM2010005: Large Infrastructure CESNET</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year

2013

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

ISBN

—

Place of publication

Varšava, Polská republika

Publisher/client name

NASK

Version

Secure 2013

Carrier ID

—