Cyber security monitoring and data analysis at IHEP
November 21, 2019
Recently, cyber security threats becomes a noticeable challenge for academic institutes.
In this paper, we present the security risk control model and the cyber security detection and monitoring system
designed and deployed at Institute of High Energy Physics (IHEP) in China.
Security data collection and analysis plays the central role in this framework.
In addition to the open-source solution like Zeek, MISP and ELK stack,
we also deployed a commercial Security Operation Center (SOC) as a supplement and cross-check solution.
How to cite
Metadata are provided both in "article" format (very similar to INSPIRE) as this helps creating
very compact bibliographies which can be beneficial to authors and
readers, and in "proceeding" format
which is more detailed and complete.