Upload
mariokgl
View
214
Download
0
Embed Size (px)
Citation preview
8/18/2019 AlienVault Alarm Taxonomy
1/5
!"#$ &'() '*+$, -+./0/,1 2+3# ! /4 "
#$%& ()* $+,-. /,0121.3 42 567
5' 6789# 4/$ !:; +09 ?+*7+@/$"A
89,: ,-) :9) 2)* ,+,-. ;,:)?@ ,2A B??C@ D567E
89,: ,-) =1.) )0,.F+)= 1G ),;9 ,+,-. ;,:)
8/18/2019 AlienVault Alarm Taxonomy
2/5
!"#$ &'() '*+$, -+./0/,1 2+3# J /4 "
! 2$/?89#" @E# 0#C#""+$1 !"#$%&$ 4/$ #+CE +*+$,
! >0+F*#" #44#C@8?# '()"()$)*+$)"# 4/$ 80C89#0@ $#"B/0"# F1 9#"C$8F803 @E# =L->L- F#E809
+@@+CM +C@8?8@1
! ,)-'.)/)%0 "#C7$8@1 ,/08@/$803 F1 7"803 C*#+$ *+037+3# $+@E#$ @E+0 @E# #"/@#$8C
C+@#3/$8#" 4$/, @E# /$8380+* 9+@+ "/7$C#N?#09/$
89,: ,-) :9)=) KC2:)2:L ;,:).[48*@$+@# E83E[?+*7# 9+@+ +" Z78#@*1 +09 Z78CM*1 +" B/""8F*#G
!"# C/,B$/,8"#9 "1"@#, @/ 3+80 +998@8/0+* +CC#""D T"@#+*W C/,B7@803
$#"/7$C#"D +09N/$ 7"# 80 +0 +@@+CM +3+80"@ "/,#/0# #*"#
8/18/2019 AlienVault Alarm Taxonomy
3/5
!"#$ &'() '*+$, -+./0/,1 2+3# 7 /4 "
C= :9)-) =1.) *,3 1G 4A)2:4G342< :9) F-)D41N= 2,.42< ;12D)2:412 G1- :9) ,+,-.E
]#"G O#H?# $#@+80#9 @E# /$8380+* 5B$#[^G_A 0+,803 C/0?#0@8/0 +09 1/7 C+0 ?8#I @E+@ 80 "#$%"&' +@
@E# @/B /4 @E# +*+$, 9#@+8* I809/I 4/$ #+CE +*+$,G &/$ #.+,B*#D 1/7 C+0 "## @E# TB$#[^G_W
0+,803 C/0?#0@8/0 4/$ @E8" +*+$, E83E*83E@#9 80 @E# F*7# F/. F#*/I)
89,: 9,FF)2= *9)2 C *,2: :1 ,AA , ;N=:1. ;1--)+,:412 -N+)E
'01 C7"@/, C/$$#*+@8/0 $7*#" 1/7H?# C$#+@#9 B$8/$ @/ ?^G_ I8** "@8** F# B$#"#0@ 80 @E# "1"@#,G
OE#0 ?8#I803 +*+$," @E+@ E+?# F##0 @$833#$#9 F1 @E#"# $7*#"D 1/7H** "8,B*1 F# B$/,B@#9 @/ +99
+09 +BB*1 @E# 0#I @+./0/,1 C+@#3/$8#" ?8+ + C/04837$+@8/0 I8J+$9G -E8" I8** 80C*79# @E# 47**
*8"@803 /4 CE/8C#" +?+8*+F*# 4/$ #+CE C+@#3/$1D "/ 8@ I8** X7"@ @+M# + 4#I ,/,#0@" @/ ,+M# @E8"
CE+03#G -E8" 8" +*"/ @$7# /4 +01 0#I C7"@/, C/$$#*+@8/0 $7*#" 1/7H9 *8M# @/ +99 I8@E80 ?^G_G
894;9 ;,:)
8/18/2019 AlienVault Alarm Taxonomy
4/5
!"#$ &'() '*+$, -+./0/,1 2+3# 5 /4 "
U)=;-4I) :9) XN,2:4:3 1G ,+,-. ;12:)2:6 M1* .,23 =F);4G4; ,+,-.= ,-) :9)-)E
>+CE +*+$, 8" @$833#$#9 F1 +0 #?#0@ C/$$#*+@8/0 $7*#G :/D +0/@E#$ I+1 /4 #.B*+80803 @E8" I/7*9
F# @/ "+1 @E+@ @E#$# +$# C7$$#0@*1 !"YYZ #?#0@ C/$$#*+@8/0 $7*#" 80 /7$ @E$#+@ 80@#**83#0C#
"7F"C$8B@8/0G a/I#?#$D @E8" 07,F#$ I8** C/0@807# @/ 80C$#+"# +" @E$#+@" #?/*?# +09 #,#$3#D
+09 @E# @#CE0/*/38C+* +F8*8@1 @/ 9#@#C@ @E#, #?/*?#" +" I#**G
-E# 4/**/I803 "E/7*9 B$/?89# "/,# E83E*83E@" I8@E $#"B#C@ @/ @E# F$#+9@E /4 /7$ @E$#+@
80@#**83#0C# C/0@#0@)
• 5+&)66$"''$6&+ 7 8/)."63 b =0 +998@8/0 @/ J! "B#C848C CE#CM" 4/$ 98"C/?#$803 "#$?8C#" /0
@+$3#@ E/"@"D I# *//M 4/$ B/$@ "C+00803 +09 ?7*0#$+F8*8@1 "C+00803 +C@8?8@8#"D I#F"#$?#$
B$/F#"D +09 "C+0" 808@8+@#9 F1 80@#$0+* E/"@"G
• 9+%":+/; 7 ?%)"# 7 @6'#$%%$#")6 b O8@E80 @E# !Y "B#C848C +@@+CM "@$+@#38#" 4/$ #.B*/8@+@8/0 +09
80"@+**+@8/0D I# *//M 4/$ !!" "B#C848C C*8#0@["89# ?7*0#$+F8*8@8#" b + C/,,/0 ?#C@/$ 4/$
#.B*/8@+@8/0G +CE #?#0@ @E+@ @$833#$" +0 +*+$, I8** $#Z78$# "B#C848C $#,#98+@8/0 @+"M" b F+"#9 /0 @E# C/0@#.@
/4 @E# #?#0@D @E# +""#@" 80?/*?#9D +09 @E# $#*+@8?# "#?#$8@1 /4 @E# +C@8?8@1G -E+@ "+89D I#H?#
B$/?89#9 TE/I @/W 3789+0C# 4/$ #?#$1 "803*# +*+$, B$/97C#9 I8@E80 '*8#0K+7*@G -E#"#
80"@$7C@8/0" +$# 4/709 I8@E80 @E# +*+$, 9#@+8* I809/I +" "##0 80 @E# "C$##0"E/@ F#*/IG -E#"#
8/18/2019 AlienVault Alarm Taxonomy
5/5
!"#$ &'() '*+$, -+./0/,1 2+3# " /4 "
80"@$7C@8/0" +$# I$8@@#0 F1 /7$ '*8#0K+7*@ S+F" @#+, ,#,F#$"D IE/ E+?# 9#C+9#" /4 V:=e- +09
\&=e #.B#$8#0C# $#"B/09803 @/ 804/$,+@8/0 "#C7$8@1 80C89#0@" +09 80?#"@83+@8/0"G !B9+@#" @/
@E8" 804/$,+@8/0 +$# 80C*79#9 80 /7$ @E$#+@ 80@#**83#0C# "7F"C$8B@8/0 C/0@#0@D +*/03 I8@E 7B9+@#"
@/ /7$ #?#0@ C/$$#*+@8/0 $7*#"D =\: "830+@7$#"D ?7*0#$+F8*8@1 +09 +""#@ 80?#0@/$1 9+@+F+"#"D +09
,/$#G