Visual problem-solving support for new event triage in centralized network security monitoring: Challenges, tools and benefits
| dc.contributor.author | Stolze, Markus | |
| dc.contributor.author | Pawlitzek, René | |
| dc.contributor.author | Wespi, Andreas | |
| dc.contributor.editor | Nedon, Jens | |
| dc.contributor.editor | Frings, Sandra | |
| dc.contributor.editor | Göbel, Oliver | |
| dc.date.accessioned | 2019-10-30T13:22:29Z | |
| dc.date.available | 2019-10-30T13:22:29Z | |
| dc.date.issued | 2003 | |
| dc.description.abstract | Organizations that provide centralized security monitoring of the networks of multiple third-party organizations are faced with a challenging task. The amount of security event data to be processed presents not only a technical challenge, but also a problem-solving challenge to operators. We present a model of the problem-solving process and discuss how visual support tools can facilitate the central problem-solving step called new event triage. We argue that with tools such as these the natural benefits of centralized monitoring can come into play, which enhances effectiveness of centralized monitoring to a level beyond the reach of organizations focusing exclusively on their own network. | en |
| dc.identifier.isbn | 3-88579-368-7 | |
| dc.identifier.pissn | 1617-5468 | |
| dc.identifier.uri | https://dl.gi.de/handle/20.500.12116/29544 | |
| dc.language.iso | en | |
| dc.publisher | Gesellschaft für Informatik e.V. | |
| dc.relation.ispartof | IT-incident management & IT-forensics – IMF 2003 | |
| dc.relation.ispartofseries | Lecture Notes in Informatics (LNI) - Proceedings, Volume P-39 | |
| dc.title | Visual problem-solving support for new event triage in centralized network security monitoring: Challenges, tools and benefits | en |
| dc.type | Text/Conference Paper | |
| gi.citation.endPage | 76 | |
| gi.citation.publisherPlace | Bonn | |
| gi.citation.startPage | 67 | |
| gi.conference.date | 24.-25. November 2003 | |
| gi.conference.location | Stuttgart | |
| gi.conference.sessiontitle | Regular Research Papers |
Dateien
Originalbündel
1 - 1 von 1
Lade...
- Name:
- GI-Proceedings.39-5.pdf
- Größe:
- 442.55 KB
- Format:
- Adobe Portable Document Format