Please use this identifier to cite or link to this item: http://hdl.handle.net/11264/1224
Full metadata record
DC FieldValueLanguage
dc.contributor.authorMénard, Sébastien-
dc.contributor.otherRoyal Military College of Canada / Collège militaire royal du Canadaen_US
dc.date.accessioned2017-02-01T14:34:50Z-
dc.date.available2017-02-01T14:34:50Z-
dc.identifier.urihttp://hdl.handle.net/11264/1224-
dc.description.abstractSecurity information and Event management (SIEM) software enable the aggregation of information generated by all security sensors within a defended network providing optimal visibility on security alerts. SIEMS have become the main information management tool used by system defenders to organize logs and security alerts for an organization's Network Operation Center (NOC). The training of system defenders is a recurring challenge, which is costly in terms of both money and time. This research contributes to the development of training methods that does not depend on network penetration teams. This research is based on the development of new techniques to train network defenders, particularly SIEM operators. We intend to develop a new approach that does not rely on the presence of a penetration testing team. The use of SIEM replay connectors is a viable alternative to train SIEMS operators. However, organizing logs characteristic of malicious scenarios in a way which can be useable by SIEM replay connectors is not trivial. This research has developed techniques and proposes an architecture to assemble logs useable by replay connectors to train SIEM operators in a semi-automatic fashion.en_US
dc.language.isofren_US
dc.subjectSIEMen_US
dc.subjectCYBER TRAININGen_US
dc.subjectSIMULATIONen_US
dc.subjectLOGSen_US
dc.subjectEMULATIONen_US
dc.subjectNetwork operantion Centeren_US
dc.subjectcyber defenseen_US
dc.titleASSEMBLAGE SEMI-AUTOMATIQUE DE LOGS POUR ENTRAINEMENT D’OPÉRATEURS DE SIEMen_US
dc.typeTheses-
dc.title.translatedSEMI-AUTOMATED LOG SEQUENCE GENERATION FOR SIEM OPERATORen_US
dc.contributor.supervisorLeblanc, Sylvain-
dc.date.acceptance2017-01-30-
thesis.degree.nameMASc (Master of Applied Science/Maîtrise ès sciences appliquées)en_US
thesis.degree.disciplineElectrical and Computer Engineering/Génie électrique et informatiqueen_US
Appears in Collections:Theses

Files in This Item:
File Description SizeFormat 
Thèse MScA Capt Ménard Mémoire.pdfThesis1.82 MBAdobe PDFView/Open


Items in RMCC eSpace are protected by copyright, with all rights reserved, unless otherwise indicated.