Security Information and Event Management (SIEM) platforms are critical for organizations to monitor and manage their security operations centers. However, organizations using SIEM platforms have several challenges su...Security Information and Event Management (SIEM) platforms are critical for organizations to monitor and manage their security operations centers. However, organizations using SIEM platforms have several challenges such as inefficiency of alert management and integration with real-time communication tools. These challenges cause delays and cost penalties for organizations in their efforts to resolve the alerts and potential security breaches. This paper introduces a cybersecurity Alert Distribution and Response Network (Adrian) system. Adrian introduces a novel enhancement to SIEM platforms by integrating SIEM functionalities with real-time collaboration platforms. Adrian leverages the uniquity of mobile applications of collaboration platforms to provide real-time alerts, enabling a two-way communication channel that facilitates immediate response to security incidents and efficient SIEM platform management. To demonstrate Adrian’s capabilities, we have introduced a case-study that integrates Wazuh, a SIEM platform, to Slack, a collaboration platform. The case study demonstrates all the functionalities of Adrian including the real-time alert distribution, alert customization, alert categorization, and enablement of management activities, thereby increasing the responsiveness and efficiency of Adrian’s capabilities. The study concludes with a discussion on the potential expansion of Adrian’s capabilities including the incorporation of artificial intelligence (AI) for enhanced alert prioritization and response automation.展开更多
During the construction of multivariate collaborative education platform including“Joint Training Platform with Japanese Universities”,“Internship Platform for Japanese Enterprises”and“Cross-border E-commerce Tal...During the construction of multivariate collaborative education platform including“Joint Training Platform with Japanese Universities”,“Internship Platform for Japanese Enterprises”and“Cross-border E-commerce Talent Cultivation for College-Enterprise Platform”,the Japanese major in GUT classifies all activities that can promote talent cultivation into“Curriculum System Related to Japanese Competence Cultivation”,“Curriculum and Project System Related to Collaborative Cultivation”and“Activity System of Student Competence Development”and subdivides the corresponding course groups in each system.Such a setup meets the needs of Japanese comprehensive capacity cultivation of Japanese talents and the requirements of different platforms for professional talents cultivation.展开更多
文摘Security Information and Event Management (SIEM) platforms are critical for organizations to monitor and manage their security operations centers. However, organizations using SIEM platforms have several challenges such as inefficiency of alert management and integration with real-time communication tools. These challenges cause delays and cost penalties for organizations in their efforts to resolve the alerts and potential security breaches. This paper introduces a cybersecurity Alert Distribution and Response Network (Adrian) system. Adrian introduces a novel enhancement to SIEM platforms by integrating SIEM functionalities with real-time collaboration platforms. Adrian leverages the uniquity of mobile applications of collaboration platforms to provide real-time alerts, enabling a two-way communication channel that facilitates immediate response to security incidents and efficient SIEM platform management. To demonstrate Adrian’s capabilities, we have introduced a case-study that integrates Wazuh, a SIEM platform, to Slack, a collaboration platform. The case study demonstrates all the functionalities of Adrian including the real-time alert distribution, alert customization, alert categorization, and enablement of management activities, thereby increasing the responsiveness and efficiency of Adrian’s capabilities. The study concludes with a discussion on the potential expansion of Adrian’s capabilities including the incorporation of artificial intelligence (AI) for enhanced alert prioritization and response automation.
基金2017 Guangxi Higher Education Undergraduate Teaching Reform Project in China(2017JGB251)。
文摘During the construction of multivariate collaborative education platform including“Joint Training Platform with Japanese Universities”,“Internship Platform for Japanese Enterprises”and“Cross-border E-commerce Talent Cultivation for College-Enterprise Platform”,the Japanese major in GUT classifies all activities that can promote talent cultivation into“Curriculum System Related to Japanese Competence Cultivation”,“Curriculum and Project System Related to Collaborative Cultivation”and“Activity System of Student Competence Development”and subdivides the corresponding course groups in each system.Such a setup meets the needs of Japanese comprehensive capacity cultivation of Japanese talents and the requirements of different platforms for professional talents cultivation.
