A holistic view on dynamic system/service monitoring for improving cyber defences

点击翻译按钮获取中文摘要

System, network and service monitoring activities aim to maintain the health of the information technology(IT) infrastructure of an organization while ensuring its availability and improving its performance. It is crucial to predict and detect anomalous behaviours indicating normal / failure / security related events. Thischallenge represents a 24/7 concern for almost all organizations. Thus, the potential for automating theinformation extraction, data analysis and decision-making is very important in order to sustain the volume,variety, veracity and velocity of modern IT infrastructure data and services. As the scale and complexity ofnetworks, applications and services increases, it becomes more and more difficult to analyze and predictthe state of a network service in IT infrastructures. It is envisioned that this research will provide a newapproach to develop techniques and tools for analyzing the heterogeneous data sources in enterprisenetwork data. This research will not only offer further insights into online monitoring and analysis, but alsoresult in improved performance for IT and security operations centers (SOCs). Contributions of theproposed research will promote significant progress in - dynamic and adaptive management of IT servicesand improve cybersecurity. The long term vision of this research will enhance the resiliency of services forcommercial, governmental, and military applications, such as rapid / accurate information retrieval andbetter fault / security management.