Work

Security Onion Platform as a Tool for Detecting and Analysing Cyber Threats

Year: 2024

Type: conference-paper

Abstract: The article discusses the use of the Security Onion platform for modelling cyber threats and evaluating the effectiveness of intrusion detection systems (IDS). Experiments have been conducted to simulate various types of attacks, such as SYN flood, brute-force, DNS flood, and DNS tunnelling, using Kali Linux tools. The results of attack detection using Suricata IDS are analysed and the data are visualised in Kibana. The results of the study demonstrate the effectiveness of using Security Onion as a comprehensive solution for monitoring, analysing, and responding to cyber threats.

Source: GRUNDLAGEN DER MODERNEN WISSENSCHAFTLICHEN FORSCHUNG

DOI: 10.36074/logos-13.12.2024.048

Authors: Vitaliy Tymoshchuk, Maksym Vorona, Andrii Dolinskyi, Viktoriia Shymanska

Institution: Ternopil Ivan Pului National Technical University

Language: English

Topic: Network Security and Intrusion Detection

Subfield: Computer Networks and Communications

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

OpenAlex ID: W4406294358

FWCI:

Cites:

Cited by:

Related to: 10