Software pro inteligentní analýzu bezpečnostních událostí (iABU)

Warning

This publication doesn't include Faculty of Arts. It includes Institute of Computer Science. Official publication website can be found on muni.cz.

Title in English	Software for the intelligent analysis of security events (iABU)
Authors	HUSÁK Martin KAŠPAR Jaroslav ŽIARAN Milan
Year of publication	2019
MU Faculty or unit	Institute of Computer Science
Web	https://github.com/CSIRT-MU/AIDA-Framework
Description	Software for the intelligent analysis of security events (iABU), also known as AIDA framework, implements a set of algorithms for automated processing of security events in a collaborative environment, extracting information on cyber threats, and prediction of the next move of an adversary. The software processes intrusion detection alerts in IDEA format, such as the alerts shared within the SABU platform. The software checks the quality of the input data, extracts frequent attack patterns using data mining techniques, and predicts the next move of an adversary in time and space. The outputs of the software are predcited security events that can be used by mitigating connectors to perform mitigation of running cyber attacks and prevention of cyber threats. The software includes web user interface to support the analysis and present the results.
Related projects:	The Sharing and Analysis of Security Events in the Czech Republic