Security Operation Center Concepts v2 - iv2-technologies.com

Security Operation Center Concepts & Implementation Renaud Bidou Abstract A Security Operation Center (SOC) is made up of five distinct modules: event generators, event collectors, message database, analysis engines and reaction management software. The main problem encountered when building a SOC is the integration of all these modules, usually built as autonomous parts, while matching availability, integrity and Security of data and their transmission channels. In this paper we will discuss the functional architecture needed to integrate those modules. Chapter one will introduce the Concepts behind each module and briefly describe common problems encountered with each of them. In chapter two we will design the global architecture of the SOC. We will then focus on collection & analysis of data generated by sensors in chapters three and four. A short conclusion will describe further research & analysis to be performed in the field of SOC design.

C and D Boxes concepts will be detailed in Chapter 3. 1.3 A Boxes and K Boxes Those modules are responsible for the analysis of events stored in D Boxes.

Loading..

Information

Related search queries