Home page logo
/

basics logo Security Basics mailing list archives

RE: Any research on log correlation and aggregation?
From: "Andrew Chong" <andrewjw () singnet com sg>
Date: Sat, 29 Oct 2005 01:36:05 +0800


A good Security Log Management book (Identifying Patterns in Chaos).
http://www.sweetfantasy.biz/prod_details.aspx?AsinSearch=1597490423&type
=heavy&f=xml

Regards,
Andrew Chong, cissp
-----Original Message-----
From: ricci [mailto:ricci () cs ust hk] 
Sent: Friday, October 28, 2005 8:55 AM
To: security-basics () securityfocus com
Subject: Any research on log correlation and aggregation?


Hello All,

I'm read some research paper about log correlation and aggregation of
various logging facilities such as syslog, IDS and Firewall logs. Is
there any research on correlation and aggregation? Is there any research
on log aggregation through timestamp and any research on time
synchronization? Is there any mechanism for correlating and aggregating
logs which do not have time synchronization?

Thx.

Ricci


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]