Gesellschaft fr Informatik e.V.

Lecture Notes in Informatics


Erste Tagung der Fachgruppe SIDAR der Gesellschaft für Informatik 24. 25. November 2003 in Stuttgart, Deutschland P-39, 67-76 (2003).

GI, Gesellschaft für Informatik, Bonn
2003


Editors

Jens Nedon, Sandra Frings, Oliver Göbel (eds.)


Copyright © GI, Gesellschaft für Informatik, Bonn

Contents

Visual problem-solving support for new event triage in centralized network security monitoring: challenges, tools and benefits

Markus Stolze , René Pawlitzek and Andreas Wespi

Abstract


Organizations that provide centralized security monitoring of the networks of multiple third-party organizations are faced with a challenging task. The amount of security event data to be processed presents not only a technical challenge, but also a problem-solving challenge to operators. We present a model of the problem-solving process and discuss how visual support tools can facilitate the central problem-solving step called new event triage. We argue that with tools such as these the natural benefits of centralized monitoring can come into play, which enhances effectiveness of centralized monitoring to a level beyond the reach of organizations focusing exclusively on their own network.


Full Text: PDF

GI, Gesellschaft für Informatik, Bonn
ISBN 3-88579-368-7


Last changed 27.07.2010 18:10:10