SecurityRatty: Coral8: Event Stream Processing and Intrusion Detection

This is cache of http://thecepblog.com/2008/01/03/coral8-event-stream-processing-and-intrusion-detection/. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Coral8: Event Stream Processing and Intrusion Detection

2008-01-03 09:08:00 by Tim Bass in The Complex Event Processing Blog

Not quite ready for prime-time, we have been testing our home-grown UNIX domain socket adapter using Coral8 Java APIs. We are using this adapter to evaluate and demonstrate stream processing with intrusion detection systems (IDS) using event stream processing to reduce false alarms, detect derived situations from the raw intrusion event data, and feed a security management visualization dashboard.

You can click on the teaser image below to see more of our first IDS screenshots from Coral8’s Studio stream visualization tool.

If you click on the image above, you will four additional event stream properties. For this part of the demo, there are 14 total IDS properties in the event stream, but we only show 5 properties in this cropped screen capture.

I am quite sure that we could do similar integration with other event stream processing engines, but fortunately Coral8 makes it easy to download, start developing and testing.