Security Event Monitoring in a Distributed Systems Environment

Network Latency in Systems Event Monitoring for Multiple Locations

“…Our previous study was limited to one location [3]. In this paper, it is extended towards multiple geographic locations, and we demonstrate how WAN network latency may impact the overall monitoring process.…”

“…As discussed in our previous paper, there are three monitoring approaches that may be considered: agent-based, agentless, and proposed order-based monitoring (OBM) [3]. The agent-based approach offers in-depth monitoring but requires additional software for each monitored system.…”

Tools for Distributed Systems Monitoring

“…The market offers dedicated solutions within security information and event management (SIEM), however all infrastructure and application monitoring tools have a customized module, which can provide basic security events verification [8]. The main purpose of monitoring solution is to collect events from security and firewall logs, store and analyze them.…”

“…Recently new methods are being introduced that encompasses agent-based and agentless advantages into one hybrid approach [8] or collection of monitoring metrics through data streams.…”

“…A hybrid approach provides new way of collecting data as it combines benefits of both agent-based and agentless approaches [8]. To meet all monitoring requirements it allows choosing between traditional monitoring approaches as well as gives an interface to integrate with custom monitoring scripts and agents (see Figure 6).…”