A holistic view on dynamic system/service monitoring for improving cyber defences

系统、网络和服务监控活动旨在维护组织的信息技术（IT）基础设施的健康，同时确保其可用性并提高其性能。预测和检测指示正常/故障/安全相关事件的异常行为至关重要。这一挑战代表了几乎所有组织全天候关注的问题。因此，为了维持现代IT基础设施数据和服务的数量、种类、准确性和速度，自动化信息提取、数据分析和决策的潜力非常重要。随着网络、应用程序和服务的规模和复杂性的增加，分析和预测it基础设施中网络服务的状态变得越来越困难。预计本研究将为开发分析企业网络数据中异构数据源的技术和工具提供一种新的方法。这项研究不仅将为在线监控和分析提供进一步的见解，而且还将提高IT和安全运营中心（soc）的性能。本研究的贡献将促进IT服务动态和适应性管理的重大进展，并改善网络安全。这项研究的长期愿景将增强商业、政府和军事应用服务的弹性，例如快速/准确的信息检索和更好的故障/安全管理。

System, network and service monitoring activities aim to maintain the health of the information technology(IT) infrastructure of an organization while ensuring its availability and improving its performance. It is crucial to predict and detect anomalous behaviours indicating normal / failure / security related events. Thischallenge represents a 24/7 concern for almost all organizations. Thus, the potential for automating theinformation extraction, data analysis and decision-making is very important in order to sustain the volume,variety, veracity and velocity of modern IT infrastructure data and services. As the scale and complexity ofnetworks, applications and services increases, it becomes more and more difficult to analyze and predictthe state of a network service in IT infrastructures. It is envisioned that this research will provide a newapproach to develop techniques and tools for analyzing the heterogeneous data sources in enterprisenetwork data. This research will not only offer further insights into online monitoring and analysis, but alsoresult in improved performance for IT and security operations centers (SOCs). Contributions of theproposed research will promote significant progress in - dynamic and adaptive management of IT servicesand improve cybersecurity. The long term vision of this research will enhance the resiliency of services forcommercial, governmental, and military applications, such as rapid / accurate information retrieval andbetter fault / security management.