TY - GEN
T1 - Implementation of the distributed hierarchical security operation center using mobile agent group
AU - Li, Jung Shian
AU - Hsieh, Che Jen
PY - 2010/9/3
Y1 - 2010/9/3
N2 - This paper proposes a novel hierarchical mobile-agent-based Security Operation Center (HMSOC) to overcome traditional SOC vulnerability in a fixed location suffering single point of failure attack. Furthermore, each division has its own alert and aggregation methodology. By IDMEF, session and timer methods, data from various divisions are fused and correlated efficiently in our proposed HMSOC. A prototype implemented in a network testbed shows HMSOC efficacy. The proposed HMSOC effectively integrates various alerts in a large network environment.
AB - This paper proposes a novel hierarchical mobile-agent-based Security Operation Center (HMSOC) to overcome traditional SOC vulnerability in a fixed location suffering single point of failure attack. Furthermore, each division has its own alert and aggregation methodology. By IDMEF, session and timer methods, data from various divisions are fused and correlated efficiently in our proposed HMSOC. A prototype implemented in a network testbed shows HMSOC efficacy. The proposed HMSOC effectively integrates various alerts in a large network environment.
UR - http://www.scopus.com/inward/record.url?scp=77956112322&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=77956112322&partnerID=8YFLogxK
U2 - 10.1109/3CA.2010.5533775
DO - 10.1109/3CA.2010.5533775
M3 - Conference contribution
AN - SCOPUS:77956112322
SN - 9781424455669
T3 - 3CA 2010 - 2010 International Symposium on Computer, Communication, Control and Automation
SP - 79
EP - 82
BT - 3CA 2010 - 2010 International Symposium on Computer, Communication, Control and Automation
T2 - 2010 International Symposium on Computer, Communication, Control and Automation, 3CA 2010
Y2 - 5 May 2010 through 7 May 2010
ER -