The Operational Role of Security Information and Event Management Systems
The Operational Role of Security Information and Event Management Systems
复制标题
DOI：
10.1109/msp.2014.103
复制
发表时间：
2014-09-01
影响因子：
1.9
通讯作者：
Zomlot, Loai
中科院分区：
文献类型：
--
作者：
Bhatt, Sandeep;Manadhata, Pratyusa K.;Zomlot, Loai
作为企业计算机安全事件响应团队不可或缺的一部分，安全运营中心(SOC)实时监控安全事件。安全事件和事件管理系统在SOC中发挥着关键作用-收集、标准化、存储和关联事件以识别恶意活动-但面临操作挑战。
An integral part of enterprise computer security incident response teams, a security operations center (SOC) monitors security incidents in real time. Security incident and event management systems play a critical role in SOCs-collecting, normalizing, storing, and correlating events to identify malicious activities-but face operational challenges.