The Experts below are selected from a list of 84 Experts worldwide ranked by ideXlab platform
Madrid Molina, Juan Manuel - One of the best experts on this subject based on the ideXlab platform.
-
Functionality, reliability and adaptability improvements to the OSSIM information Security Console
'Institute of Electrical and Electronics Engineers (IEEE)', 2009Co-Authors: Madrid Molina, Juan Manuel, Munera Salazar, Luis Eduardo, Montoya C.a., Osorio J.d., Cardenas L.e., Bedoya R., Latorre C.Abstract:Security Consoles are among the most widely deployed tools for information Security management in today's organizations. This article summarizes the work of our research team, in order to incorporate several enhancements to the OSSIM information Security Console. Such enhancements include integration with physical Security control devices, automatic creation of correlation directives for OSSIM's correlation engine, and a significant improvement in information capture reliability on high-traffic networks. © 2009 IEEE
-
Integración de un panel de alarma de incendio y un sistema de cámaras de vigilancia IP con la consola de seguridad informática OSSIM
Facultad de Ingeniería, 2008Co-Authors: Madrid Molina, Juan Manuel, Osorio Betancur, Juan David, Cárdenas, Luis Ernesto, Bedoya Rodrigo, Latorre CristianAbstract:Una de las herramientas más usadas hoy en día para la gestión de la seguridad informática en las empresas es la consola de seguridad. Para garantizar un cubrimiento óptimo de los requerimientos de seguridad informática enunciados en normas internacionales, las consolas de seguridad deberían tener en cuenta el dominio de la seguridad física. Este artículo resume el trabajo efectuado por nuestro equipo de investigación para integrar un panel de alarma contra incendio y un sistema de cámaras de vigilancia IP con la consola de seguridad informática OSSIM.Security Consoles are among the most widely deployed tools for enterprise- wide information Security management. In order to assure an optimal coverage of the information Security requirements according to international standards, Security Consoles should take into account the physical Security domain. This article summarizes the work of our research team, in order to integrate a fire alarm control panel and an IP surveillance camera system with the OSSIM information Security Console
-
Integration of a Fire Alarm Control Panel and an IP Surveillance Camera System with the OSSIM Information Security Console
'Universidad Icesi', 2008Co-Authors: Madrid Molina, Juan Manuel, Osorio Betancur, Juan David, Cárdenas, Luis Ernesto, Bedoya Rodrigo, Latorre CristianAbstract:Una de las herramientas más usadas hoy en día para la gestión de la seguridad informática en las empresas es la consola de seguridad. Para garantizar un cubrimiento óptimo de los requerimientos de seguridad informática enunciados en normas internacionales, las consolas de seguridad deberían tener en cuenta el dominio de la seguridad física. Este artículo resume el trabajo efectuado por nuestro equipo de investigación para integrar un panel de alarma contra incendio y un sistema de cámaras de vigilancia IP con la consola de seguridad informática OSSIM.Security Consoles are among the most widely deployed tools for enterprise- wide information Security management. In order to assure an optimal coverage of the information Security requirements according to international standards, Security Consoles should take into account the physical Security domain. This article summarizes the work of our research team, in order to integrate a fire alarm control panel and an IP surveillance camera system with the OSSIM information Security Console
-
Implementación y mejora de la consola de seguridad informática OSSIM: una experiencia de colaboración universidad-empresa
2008Co-Authors: Madrid Molina, Juan Manuel, Munera Salazar, Luis EduardoAbstract:La consola de seguridad es una de las herramientas más usadas para la gestión de la seguridad informática en las organizaciones. Este artículo resume el trabajo efectuado por el equipo de investigación para integrar una serie de mejoras a la consola de seguridad informática OSSIM, con el fin de cubrir las necesidades del entorno colombiano. Dichas mejoras incluyen la interconexión con dispositivos de seguridad física, la implementación de un módulo de creación automática de directivas de correlación para el motor de la herramienta, y la mejora significativa de la confiabilidad de captura de información en redes con alto tráfico. Security management Consoles are today among the most widely deployed tools for information Security management in the enterprise. This article summarizes the work done by our research group, in order to implement a series of improvements to the OSSIM Security Console, aiming to fulfill the Colombian market needs. The improvements include an interface with physical Security devices, the creation of a software module for automatic creation of correlation rules, and a significant enhancement of information capture reliability in highly congested networksSecurity management Consoles are today among the most widely deployed tools for information Security management in the enterprise. This article summarizes the work done by our research group, in order to implement a series of improvements to the OSSIM Security Console, aiming to fulfill the Colombian market needs. The improvements include an interface with physical Security devices, the creation of a software module for automatic creation of correlation rules, and a significant enhancement of information capture reliability in highly congested network
-
Implementación y mejora de la consola de seguridad informática OSSIM: una experiencia de colaboración universidad-empresa
2008Co-Authors: Madrid Molina, Juan Manuel, Munera Salazar, Luis EduardoAbstract:La consola de seguridad es una de las herramientas más usadas para la gestión de la seguridad informática en las organizaciones. Este artículo resume el trabajo efectuado por el equipo de investigación para integrar una serie de mejoras a la consola de seguridad informática OSSIM, con el fin de cubrir las necesidades del entorno colombiano. Dichas mejoras incluyen la interconexión con dispositivos de seguridad física, la implementación de un módulo de creación automática de directivas de correlación para el motor de la herramienta, y la mejora significativa de la confiabilidad de captura de información en redes con alto tráfico.Security management Consoles are today among the most widely deployed tools for information Security management in the enterprise. This article summarizes the work done by our research group, in order to implement a series of improvements to the OSSIM Security Console, aiming to fulfill the Colombian market needs. The improvements include an interface with physical Security devices, the creation of a software module for automatic creation of correlation rules, and a significant enhancement of information capture reliability in highly congested network
Munera Salazar, Luis Eduardo - One of the best experts on this subject based on the ideXlab platform.
-
Functionality, reliability and adaptability improvements to the OSSIM information Security Console
'Institute of Electrical and Electronics Engineers (IEEE)', 2009Co-Authors: Madrid Molina, Juan Manuel, Munera Salazar, Luis Eduardo, Montoya C.a., Osorio J.d., Cardenas L.e., Bedoya R., Latorre C.Abstract:Security Consoles are among the most widely deployed tools for information Security management in today's organizations. This article summarizes the work of our research team, in order to incorporate several enhancements to the OSSIM information Security Console. Such enhancements include integration with physical Security control devices, automatic creation of correlation directives for OSSIM's correlation engine, and a significant improvement in information capture reliability on high-traffic networks. © 2009 IEEE
-
Implementación y mejora de la consola de seguridad informática OSSIM: una experiencia de colaboración universidad-empresa
2008Co-Authors: Madrid Molina, Juan Manuel, Munera Salazar, Luis EduardoAbstract:La consola de seguridad es una de las herramientas más usadas para la gestión de la seguridad informática en las organizaciones. Este artículo resume el trabajo efectuado por el equipo de investigación para integrar una serie de mejoras a la consola de seguridad informática OSSIM, con el fin de cubrir las necesidades del entorno colombiano. Dichas mejoras incluyen la interconexión con dispositivos de seguridad física, la implementación de un módulo de creación automática de directivas de correlación para el motor de la herramienta, y la mejora significativa de la confiabilidad de captura de información en redes con alto tráfico. Security management Consoles are today among the most widely deployed tools for information Security management in the enterprise. This article summarizes the work done by our research group, in order to implement a series of improvements to the OSSIM Security Console, aiming to fulfill the Colombian market needs. The improvements include an interface with physical Security devices, the creation of a software module for automatic creation of correlation rules, and a significant enhancement of information capture reliability in highly congested networksSecurity management Consoles are today among the most widely deployed tools for information Security management in the enterprise. This article summarizes the work done by our research group, in order to implement a series of improvements to the OSSIM Security Console, aiming to fulfill the Colombian market needs. The improvements include an interface with physical Security devices, the creation of a software module for automatic creation of correlation rules, and a significant enhancement of information capture reliability in highly congested network
-
Implementación y mejora de la consola de seguridad informática OSSIM: una experiencia de colaboración universidad-empresa
2008Co-Authors: Madrid Molina, Juan Manuel, Munera Salazar, Luis EduardoAbstract:La consola de seguridad es una de las herramientas más usadas para la gestión de la seguridad informática en las organizaciones. Este artículo resume el trabajo efectuado por el equipo de investigación para integrar una serie de mejoras a la consola de seguridad informática OSSIM, con el fin de cubrir las necesidades del entorno colombiano. Dichas mejoras incluyen la interconexión con dispositivos de seguridad física, la implementación de un módulo de creación automática de directivas de correlación para el motor de la herramienta, y la mejora significativa de la confiabilidad de captura de información en redes con alto tráfico.Security management Consoles are today among the most widely deployed tools for information Security management in the enterprise. This article summarizes the work done by our research group, in order to implement a series of improvements to the OSSIM Security Console, aiming to fulfill the Colombian market needs. The improvements include an interface with physical Security devices, the creation of a software module for automatic creation of correlation rules, and a significant enhancement of information capture reliability in highly congested network
Latorre Cristian - One of the best experts on this subject based on the ideXlab platform.
-
Integración de un panel de alarma de incendio y un sistema de cámaras de vigilancia IP con la consola de seguridad informática OSSIM
Facultad de Ingeniería, 2008Co-Authors: Madrid Molina, Juan Manuel, Osorio Betancur, Juan David, Cárdenas, Luis Ernesto, Bedoya Rodrigo, Latorre CristianAbstract:Una de las herramientas más usadas hoy en día para la gestión de la seguridad informática en las empresas es la consola de seguridad. Para garantizar un cubrimiento óptimo de los requerimientos de seguridad informática enunciados en normas internacionales, las consolas de seguridad deberían tener en cuenta el dominio de la seguridad física. Este artículo resume el trabajo efectuado por nuestro equipo de investigación para integrar un panel de alarma contra incendio y un sistema de cámaras de vigilancia IP con la consola de seguridad informática OSSIM.Security Consoles are among the most widely deployed tools for enterprise- wide information Security management. In order to assure an optimal coverage of the information Security requirements according to international standards, Security Consoles should take into account the physical Security domain. This article summarizes the work of our research team, in order to integrate a fire alarm control panel and an IP surveillance camera system with the OSSIM information Security Console
-
Integration of a Fire Alarm Control Panel and an IP Surveillance Camera System with the OSSIM Information Security Console
'Universidad Icesi', 2008Co-Authors: Madrid Molina, Juan Manuel, Osorio Betancur, Juan David, Cárdenas, Luis Ernesto, Bedoya Rodrigo, Latorre CristianAbstract:Una de las herramientas más usadas hoy en día para la gestión de la seguridad informática en las empresas es la consola de seguridad. Para garantizar un cubrimiento óptimo de los requerimientos de seguridad informática enunciados en normas internacionales, las consolas de seguridad deberían tener en cuenta el dominio de la seguridad física. Este artículo resume el trabajo efectuado por nuestro equipo de investigación para integrar un panel de alarma contra incendio y un sistema de cámaras de vigilancia IP con la consola de seguridad informática OSSIM.Security Consoles are among the most widely deployed tools for enterprise- wide information Security management. In order to assure an optimal coverage of the information Security requirements according to international standards, Security Consoles should take into account the physical Security domain. This article summarizes the work of our research team, in order to integrate a fire alarm control panel and an IP surveillance camera system with the OSSIM information Security Console
Dipankar Dasgupta - One of the best experts on this subject based on the ideXlab platform.
-
Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security - Mining Security events in a distributed agent society
Data Mining Intrusion Detection Information Assurance and Data Networks Security 2006, 2006Co-Authors: Dipankar Dasgupta, Jose Milet Rodriguez, S. BalachandranAbstract:In distributed agent architecture, tasks are performed on multiple computers which are sometimes spread across different locations. While it is important to collect Security critical sensory information from the agent society, it is equally important to analyze and report such Security events in a precise and useful manner. Data mining techniques are found to be very efficient in the generation of Security event profiles. This paper describes the implementation of such a Security alert mining tool which generates profiles of Security events collected from a large agent society. In particular, our previous work addressed the development of a Security Console to collect and display alert message (IDMEF) from a Cougaar (agent) society. These messages are then logged in an XML database for further off-line analysis. In our current work, stream mining algorithms are applied for sequencing and generating frequently occurring episodes, and then finding association rules among frequent candidate episodes. This alert miner could profile most prevalent patterns as indications of frequent attacks in a large agent society.
-
Intelligent Security Console Architecture
2005Co-Authors: Dipankar DasguptaAbstract:Abstract : This report addresses the design of an Intelligent Security Console equipped with Intrusion Detection Message Exchange Format (IDMEF) Objects' data mining for the DARPA Ultra*Log Program. It supports the scalable Monitoring and Response Security Console architecture. The Data Mining capability requires scalability of message management, that has been ensured through incorporation of an XML Database (eXist). Security Console is used to query for IDMEF alerts generated across the society by various sensors (including COTS). The results are shown as a tree with the structure corresponding to the Security communities' hierarchy in getting the society status through queries and alert messages. The latest version (4.1) of the Security Console is designed to mine frequent patterns in Intrusion attacks with an XML repository for collecting and organizing alerts and event messages. This ensures scalability and organized storage of voluminous information over a period of time.
-
Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security - Efficient visualization of Security events in a large agent society
Data Mining Intrusion Detection Information Assurance and Data Networks Security 2005, 2005Co-Authors: Dipankar Dasgupta, Jose Milet Rodriguez, S. BalachandranAbstract:The paper describes the design and development of an efficient visualization tool called Security Console for monitoring Security related events in a large agent society (Cougaar). This administrative tool is primarily used to collect and process alert messages generated by various sensors across the distributed agent society. This tool exploits the agents" hierarchical structural for aggregating Security events in order to discover correlation among them. In particular, it logically groups related alerts from raw messages (by removing duplicates, if any) and applies data mining techniques (like association rules and frequency episode learning), to discover situations that have certain characteristics in common. We performed extensive experimentation with the Security Console in various attack scenarios that generate large number of alert messages. Reported results exhibit that this alert monitoring and correlation tool can provide a profile of attack patterns which occur more frequently in the monitored agent society.© (2005) COPYRIGHT SPIE--The International Society for Optical Engineering. Downloading of the abstract is permitted for personal use only.
S. Balachandran - One of the best experts on this subject based on the ideXlab platform.
-
Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security - Mining Security events in a distributed agent society
Data Mining Intrusion Detection Information Assurance and Data Networks Security 2006, 2006Co-Authors: Dipankar Dasgupta, Jose Milet Rodriguez, S. BalachandranAbstract:In distributed agent architecture, tasks are performed on multiple computers which are sometimes spread across different locations. While it is important to collect Security critical sensory information from the agent society, it is equally important to analyze and report such Security events in a precise and useful manner. Data mining techniques are found to be very efficient in the generation of Security event profiles. This paper describes the implementation of such a Security alert mining tool which generates profiles of Security events collected from a large agent society. In particular, our previous work addressed the development of a Security Console to collect and display alert message (IDMEF) from a Cougaar (agent) society. These messages are then logged in an XML database for further off-line analysis. In our current work, stream mining algorithms are applied for sequencing and generating frequently occurring episodes, and then finding association rules among frequent candidate episodes. This alert miner could profile most prevalent patterns as indications of frequent attacks in a large agent society.
-
Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security - Efficient visualization of Security events in a large agent society
Data Mining Intrusion Detection Information Assurance and Data Networks Security 2005, 2005Co-Authors: Dipankar Dasgupta, Jose Milet Rodriguez, S. BalachandranAbstract:The paper describes the design and development of an efficient visualization tool called Security Console for monitoring Security related events in a large agent society (Cougaar). This administrative tool is primarily used to collect and process alert messages generated by various sensors across the distributed agent society. This tool exploits the agents" hierarchical structural for aggregating Security events in order to discover correlation among them. In particular, it logically groups related alerts from raw messages (by removing duplicates, if any) and applies data mining techniques (like association rules and frequency episode learning), to discover situations that have certain characteristics in common. We performed extensive experimentation with the Security Console in various attack scenarios that generate large number of alert messages. Reported results exhibit that this alert monitoring and correlation tool can provide a profile of attack patterns which occur more frequently in the monitored agent society.© (2005) COPYRIGHT SPIE--The International Society for Optical Engineering. Downloading of the abstract is permitted for personal use only.