The Analysis of Attacks Against Port 80 Webserver with SIEM Wazuh Using Detection and OSCAR Methods

Suryantoro, Tri; Purnomosidi, Bambang D.P.; Andriyani, Widyastuti

doi:10.1109/isriti56927.2022.10052950

Cited by 3 publications

(1 citation statement)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These systems include Wazuh, which functions as a Security Information and Event Management (SIEM) system, as well as an XDR and EDR system capable of detecting any threat. Alongside Wazuh, there are TheHive, Cortex, n 8 n, Cuckoo Sandbox, and MISP [ 35 ], all fulfilling the functionalities of a Security Incident Response Platform (SIRP). FleetDM with OsQuery serves as the threat-hunting and identification module.…”

Section: Design and Implementation Of The Security Framework For Assu...mentioning

confidence: 99%

Enhancing Cyber-Resilience for Small and Medium-Sized Organizations with Prescriptive Malware Analysis, Detection and Response

Ilca,

Lucian,

Balan

2023

Sensors

View full text Add to dashboard Cite

In this study, the methodology of cyber-resilience in small and medium-sized organizations (SMEs) is investigated, and a comprehensive solution utilizing prescriptive malware analysis, detection and response using open-source solutions is proposed for detecting new emerging threats. By leveraging open-source solutions and software, a system specifically designed for SMEs with up to 250 employees is developed, focusing on the detection of new threats. Through extensive testing and validation, as well as efficient algorithms and techniques for anomaly detection, safety, and security, the effectiveness of the approach in enhancing SMEs’ cyber-defense capabilities and bolstering their overall cyber-resilience is demonstrated. The findings highlight the practicality and scalability of utilizing open-source resources to address the unique cybersecurity challenges faced by SMEs. The proposed system combines advanced malware analysis techniques with real-time threat intelligence feeds to identify and analyze malicious activities within SME networks. By employing machine-learning algorithms and behavior-based analysis, the system can effectively detect and classify sophisticated malware strains, including those previously unseen. To evaluate the system’s effectiveness, extensive testing and validation were conducted using real-world datasets and scenarios. The results demonstrate significant improvements in malware detection rates, with the system successfully identifying emerging threats that traditional security measures often miss. The proposed system represents a practical and scalable solution using containerized applications that can be readily deployed by SMEs seeking to enhance their cyber-defense capabilities.

show abstract

Section: Design and Implementation Of The Security Framework For Assu...mentioning

confidence: 99%

Enhancing Cyber-Resilience for Small and Medium-Sized Organizations with Prescriptive Malware Analysis, Detection and Response

Ilca,

Lucian,

Balan

2023

Sensors

View full text Add to dashboard Cite

show abstract

Software System for Cybersecurity Events Correlation and Incident Management in Critical Infrastructure

Gnatyuk,

Berdibayev,

Aleksander

et al. 2024

Lecture Notes on Data Engineering and Communications Technologies

View full text Add to dashboard Cite

Reconstruction and Detection of Gambling Web Defacement Attack Using Wazuh and Velociraptor

Kurniawan,

Triayudi

2024

2024 International Conference on Information Technology Research and Innovation (ICITRI)

View full text Add to dashboard Cite

The Analysis of Attacks Against Port 80 Webserver with SIEM Wazuh Using Detection and OSCAR Methods

Cited by 3 publications

References 8 publications

Enhancing Cyber-Resilience for Small and Medium-Sized Organizations with Prescriptive Malware Analysis, Detection and Response

Enhancing Cyber-Resilience for Small and Medium-Sized Organizations with Prescriptive Malware Analysis, Detection and Response

Software System for Cybersecurity Events Correlation and Incident Management in Critical Infrastructure

Reconstruction and Detection of Gambling Web Defacement Attack Using Wazuh and Velociraptor

Contact Info

Product

Resources

About