mailing list archives
RE: Any research on log correlation and aggregation?
From: "Andrew Chong" <andrewjw () singnet com sg>
Date: Sat, 29 Oct 2005 01:36:05 +0800
A good Security Log Management book (Identifying Patterns in Chaos).
Andrew Chong, cissp
From: ricci [mailto:ricci () cs ust hk]
Sent: Friday, October 28, 2005 8:55 AM
To: security-basics () securityfocus com
Subject: Any research on log correlation and aggregation?
I'm read some research paper about log correlation and aggregation of
various logging facilities such as syslog, IDS and Firewall logs. Is
there any research on correlation and aggregation? Is there any research
on log aggregation through timestamp and any research on time
synchronization? Is there any mechanism for correlating and aggregating
logs which do not have time synchronization?
- Re: -Old_Address- Todays dumb question, (continued)