AlertResponder

AlertResponder 注意：此仓库已废弃。新仓库位于：https://github.com/m-mizutani/deepalert AlertResponder 是一个用于安全告警自动响应的无服务器框架。 概述 AlertResponder 接收从安全视角值得关注的事件即告警，并自动响应告警。AlertResponder 包含自动响应的 3 个部分。 1. 检查器 Inspector 调查告警中出现的实体，包括 IP 地址、域名，并存储结果：信誉度、恶意活动历史、关联的云实例等。以下组件已提供，可与您的 AlertResponder...

A Simple Data Exfiltration Game

Data exfiltration is a growing problem for business who face costs related to the loss of confidential data as well as potential extortion. This work presents a simple game theoretic model of network data exfiltration. In the model, the attacker chooses the exfiltration route and speed, and the...

AlertResponder - Automatic Security Alert Response Framework By AWS Serverless Application Model

AlertResponder is a serverless framework for automatic response of security alert. Overview AlertResponder receives an alert that is event of interest from security view point and responses the alert automatically. AlertResponder has 3 parts of automatic response. 1. Inspector investigates entiti...