Transcription of Security Operation Center Concepts v2 - iv2 …
{{id}} {{{paragraph}}}
Example: air traffic controller
Security Operation Center Concepts v2 - iv2 …
Security Operation Center Concepts & Implementation Renaud Bidou Abstract A Security Operation Center (SOC) is made up of five distinct modules: event generators, event collectors, message database, analysis engines and reaction management software. The main problem encountered when building a SOC is the integration of all these modules, usually built as autonomous parts, while matching availability, integrity and Security of data and their transmission channels. In this paper we will discuss the functional architecture needed to integrate those modules. Chapter one will introduce the Concepts behind each module and briefly describe common problems encountered with each of them.
2 SOC global architecture The SOC global architecture implements the different box types defined in the preceding chapter. However, beside the pure technical aspects involved in
Loading..
Information
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document: