{"id":36204,"date":"2019-10-31T22:10:16","date_gmt":"2019-10-31T19:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\/"},"modified":"2020-12-21T09:34:37","modified_gmt":"2020-12-21T07:34:37","slug":"5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","title":{"rendered":"5 open-source syst\u00e9m\u016f pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"5 open-source syst\u00e9m\u016f pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed\" src=\"\/wp-content\/uploads\/2019\/07\/aa62f0bea220d09adad31d5ee9eaa3af.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p><i>\u010c\u00edm se dobr\u00fd bezpe\u010dnostn\u00ed expert v IT oblasti li\u0161\u00ed od b\u011b\u017en\u00e9ho? Ne t\u00edm, \u017ee by si za ka\u017edou cenu pamatoval po\u010det zpr\u00e1v, kter\u00e9 mana\u017eer Igor poslal v\u010dera kolegyni Marii. Dobr\u00fd bezpe\u010dnostn\u00ed expert se sna\u017e\u00ed odhalit mo\u017en\u00e9 poru\u0161en\u00ed p\u0159edem a chytat je v re\u00e1ln\u00e9m \u010dase, d\u011bl\u00e1 v\u0161e pro to, aby nedo\u0161lo k pokra\u010dov\u00e1n\u00ed incidentu. Syst\u00e9my \u0159\u00edzen\u00ed bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed (SIEM, z anglick\u00e9ho Security Information and Event Management) v\u00fdrazn\u011b usnad\u0148uj\u00ed \u00fakol rychl\u00e9 detekce a blokov\u00e1n\u00ed v\u0161ech pokus\u016f o poru\u0161en\u00ed.<\/i><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTradi\u010dn\u011b SIEM syst\u00e9my spojuj\u00ed v sob\u011b syst\u00e9m \u0159\u00edzen\u00ed informa\u010dn\u00ed bezpe\u010dnosti a syst\u00e9m \u0159\u00edzen\u00ed bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed. D\u016fle\u017eitou vlastnost\u00ed syst\u00e9m\u016f je anal\u00fdza bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed v re\u00e1ln\u00e9m \u010dase, co\u017e umo\u017e\u0148uje reagovat na n\u011b je\u0161t\u011b p\u0159ed vznikem re\u00e1ln\u00e9 \u0161kody.<\/p>\n<p><b>Hlavn\u00ed \u00fakoly SIEM syst\u00e9m\u016f:<\/b><\/p>\n<ul>\n<li>Shroma\u017e\u010fov\u00e1n\u00ed a normalizace dat<\/li>\n<li>Korelace dat<\/li>\n<li>Upozorn\u011bn\u00ed<\/li>\n<li>Vizualiza\u010dn\u00ed panely<\/li>\n<li>Organizace uchov\u00e1v\u00e1n\u00ed dat<\/li>\n<li>Vyhled\u00e1v\u00e1n\u00ed a anal\u00fdza dat<\/li>\n<li>Reporting<\/li>\n<\/ul>\n<h2>P\u0159\u00ed\u010diny vysok\u00e9 popt\u00e1vky po SIEM syst\u00e9mech<\/h2>\n<p>V posledn\u00ed dob\u011b vzrostla slo\u017eitost a koordinace \u00fatok\u016f na informa\u010dn\u00ed syst\u00e9my. Spolu s t\u00edm se komplikuje i pou\u017e\u00edvan\u00e1 komplexn\u00ed ochrany informa\u010dn\u00edch syst\u00e9m\u016f \u2014 s\u00ed\u0165ov\u00e9 a hostovan\u00e9 syst\u00e9my detekce naru\u0161en\u00ed, DLP syst\u00e9my, antivirov\u00e9 syst\u00e9my a firewally, skenery zranitelnost\u00ed a dal\u0161\u00ed. Ka\u017ed\u00fd ochrann\u00fd prost\u0159edek generuje proud ud\u00e1lost\u00ed s r\u016fznou \u00farovn\u00ed detail\u016f a \u010dasto lze \u00fatok detekovat pouze podle p\u0159ekryvu ud\u00e1lost\u00ed z r\u016fzn\u00fdch syst\u00e9m\u016f.<\/p>\n<p>O r\u016fzn\u00fdch komer\u010dn\u00edch SIEM syst\u00e9mech bylo naps\u00e1no mnoho <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/muk\/blog\/325330\/\">v\u011bc\u00ed<\/a><\/noindex>, ale my nab\u00edz\u00edme stru\u010dn\u00fd p\u0159ehled bezplatn\u00fdch, plnohodnotn\u00fdch open-source SIEM syst\u00e9m\u016f, kter\u00e9 nemaj\u00ed um\u011bl\u00e1 omezen\u00ed na po\u010det u\u017eivatel\u016f nebo objemy shroma\u017e\u010fovan\u00fdch a uchov\u00e1van\u00fdch dat, a tak\u00e9 se snadno \u0161k\u00e1luj\u00ed a podporuj\u00ed. Douf\u00e1me, \u017ee to pom\u016f\u017ee ocenit potenci\u00e1l t\u011bchto syst\u00e9m\u016f a u\u010dinit rozhodnut\u00ed, zda tyto \u0159e\u0161en\u00ed integrovat do obchodn\u00edch proces\u016f spole\u010dnosti.<\/p>\n<h3>AlienVault OSSIM<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source syst\u00e9m\u016f pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed\" src=\"\/wp-content\/uploads\/2019\/07\/f74856a0ce3eeb7ecccc16db6ae5e076.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>AlienVault OSSIM je open-source verze AlienVault USM, jednoho z p\u0159edn\u00edch komer\u010dn\u00edch SIEM syst\u00e9m\u016f. OSSIM p\u0159edstavuje r\u00e1mec slo\u017een\u00fd z n\u011bkolika projekt\u016f s otev\u0159en\u00fdm zdrojov\u00fdm k\u00f3dem, v\u010detn\u011b s\u00ed\u0165ov\u00e9ho syst\u00e9mu detekce \u00fatok\u016f Snort, syst\u00e9mu monitorov\u00e1n\u00ed s\u00edt\u00ed a uzl\u016f Nagios, hostovan\u00e9 syst\u00e9mu detekce \u00fatok\u016f OSSEC a skeneru zranitelnost\u00ed OpenVAS.<\/p>\n<p>Pro monitorov\u00e1n\u00ed za\u0159\u00edzen\u00ed se pou\u017e\u00edv\u00e1 AlienVault Agent, kter\u00fd odes\u00edl\u00e1 protokoly z hostitele ve form\u00e1tu syslog na platformu GELF, nebo m\u016f\u017ee vyu\u017e\u00edvat plugin pro integraci s extern\u00edmi slu\u017ebami, jako je slu\u017eba reverzn\u00edho proxy pro weby Cloudflare nebo syst\u00e9m v\u00edcifaktorov\u00e9 autentizace Okta.<\/p>\n<p>Verze USM se li\u0161\u00ed od OSSIM roz\u0161\u00ed\u0159enou funkcionalitou spr\u00e1vy protokol\u016f, monitorov\u00e1n\u00edm cloudov\u00e9 infrastruktury, automatizac\u00ed a aktualizovan\u00fdmi informacemi o hrozb\u00e1ch a vizualizac\u00ed.<\/p>\n<p><b>V\u00fdhody<\/b><\/p>\n<ul>\n<li>Postaven\u00e1 na osv\u011bd\u010den\u00fdch open-source projektech;<\/li>\n<li>Velk\u00e9 komunitn\u00ed u\u017eivatel\u016f a v\u00fdvoj\u00e1\u0159\u016f.<\/li>\n<\/ul>\n<p><b>Nev\u00fdhody<\/b><\/p>\n<ul>\n<li>Nepodporuje monitorov\u00e1n\u00ed cloudov\u00fdch platforem (nap\u0159. AWS nebo Azure);<\/li>\n<li>Chyb\u00ed spr\u00e1va protokol\u016f, vizualizace, automatizace a integrace s extern\u00edmi slu\u017ebami.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossimlabs\/ossim\"><b>Source<\/b><\/a><\/noindex><\/p>\n<h3>MozDef (Mozilla Defense Platform)<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source syst\u00e9m\u016f pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed\" src=\"\/wp-content\/uploads\/2019\/07\/028c667490a6b0de1f0dd6b6cc283f93.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>SIEM syst\u00e9m MozDef vyvinut\u00fd Mozillou je ur\u010den k automatizaci proces\u016f zpracov\u00e1n\u00ed bezpe\u010dnostn\u00edch incident\u016f. Syst\u00e9m byl vyvinut od z\u00e1klad\u016f, aby dos\u00e1hl optim\u00e1ln\u00ed rychlosti, \u0161k\u00e1lovatelnosti a odolnosti proti selh\u00e1n\u00ed, s mikroservisn\u00ed architekturou \u2013 ka\u017ed\u00fd servis b\u011b\u017e\u00ed v kontejneru Docker.<\/p>\n<p>Stejn\u011b jako OSSIM, je MozDef postaven na osv\u011bd\u010den\u00fdch open-source projektech, kter\u00e9 zahrnuj\u00ed modul pro indexaci protokol\u016f a vyhled\u00e1v\u00e1n\u00ed Elasticsearch, platformu Meteor pro vytv\u00e1\u0159en\u00ed flexibiln\u00edho webov\u00e9ho rozhran\u00ed, a plugin Kibana pro vizualizaci a grafovou anal\u00fdzu.<\/p>\n<p>Korelace ud\u00e1lost\u00ed a upozorn\u011bn\u00ed se prov\u00e1d\u00ed pomoc\u00ed dotaz\u016f v Elasticsearch, co\u017e umo\u017e\u0148uje vytv\u00e1\u0159et vlastn\u00ed pravidla pro zpracov\u00e1n\u00ed ud\u00e1lost\u00ed a upozorn\u011bn\u00ed pomoc\u00ed Pythonu. Podle Mozilly m\u016f\u017ee MozDef zpracov\u00e1vat v\u00edce ne\u017e 300 milion\u016f ud\u00e1lost\u00ed denn\u011b. MozDef p\u0159ij\u00edm\u00e1 ud\u00e1losti pouze ve form\u00e1tu JSON, ale existuje integrace s extern\u00edmi slu\u017ebami.<\/p>\n<p><b>V\u00fdhody<\/b><\/p>\n<ul>\n<li>Nepou\u017e\u00edv\u00e1 agenty \u2013 pracuje se standardn\u00edmi protokoly JSON;<\/li>\n<li>Snadno \u0161k\u00e1lovateln\u00fd d\u00edky mikroservisn\u00ed architektu\u0159e;<\/li>\n<li>Podporuje zdroje dat cloudov\u00fdch slu\u017eeb, v\u010detn\u011b AWS CloudTrail a GuardDuty.<\/li>\n<\/ul>\n<p><b>Nev\u00fdhody<\/b><\/p>\n<ul>\n<li>Nov\u00fd a m\u00e9n\u011b ust\u00e1len\u00fd syst\u00e9m.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/MozDef\"><b>Source<\/b><\/a><\/noindex><\/p>\n<h3>Wazuh<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source syst\u00e9m\u016f pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed\" src=\"\/wp-content\/uploads\/2019\/07\/b03ade4628c4cca1dd732a1e3a1f320f.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Wazuh se za\u010dal vyv\u00edjet jako fork OSSEC, jednoho z nejpopul\u00e1rn\u011bj\u0161\u00edch SIEM s otev\u0159en\u00fdm k\u00f3dem. Nyn\u00ed je to jedine\u010dn\u00e9 \u0159e\u0161en\u00ed s novou funkcionalitou, opraven\u00fdmi chybami a optimalizovanou architekturou.<\/p>\n<p>Syst\u00e9m je postaven na stohu ElasticStack (Elasticsearch, Logstash, Kibana) a podporuje jak sb\u011br dat na z\u00e1klad\u011b agent\u016f, tak p\u0159\u00edjem syst\u00e9mov\u00fdch protokol\u016f. D\u00edky tomu je efektivn\u00ed pro monitorov\u00e1n\u00ed za\u0159\u00edzen\u00ed, kter\u00e1 generuj\u00ed protokoly, ale nepodporuj\u00ed instalaci agenta \u2013 s\u00ed\u0165ov\u00e1 za\u0159\u00edzen\u00ed, tisk\u00e1rny a perif\u00e9rie.<\/p>\n<p>Wazuh podporuje existuj\u00edc\u00ed agenty OSSEC a dokonce poskytuje pr\u016fvodce migrac\u00ed z OSSEC na Wazuh. I kdy\u017e je OSSEC st\u00e1le aktivn\u011b podporov\u00e1n, Wazuh je pova\u017eov\u00e1n za pokra\u010dov\u00e1n\u00ed OSSEC d\u00edky nov\u00e9mu webov\u00e9mu rozhran\u00ed, REST API, komplexn\u011bj\u0161\u00edmu souboru pravidel a mnoha dal\u0161\u00edm vylep\u0161en\u00edm.<\/p>\n<p><b>V\u00fdhody<\/b><\/p>\n<ul>\n<li>Zalo\u017een a kompatibiln\u00ed s popul\u00e1rn\u00ed SIEM OSSEC;<\/li>\n<li>Podporuje r\u016fzn\u00e9 mo\u017enosti instalace: Docker, Puppet, Chef, Ansible;<\/li>\n<li>Podporuje monitorov\u00e1n\u00ed cloudov\u00fdch slu\u017eeb, v\u010detn\u011b AWS a Azure;<\/li>\n<li>Obsahuje komplexn\u00ed sadu pravidel pro detekci mnoha typ\u016f \u00fatok\u016f a umo\u017e\u0148uje jejich porovn\u00e1n\u00ed se standardy PCI DSS v3.1 a CIS.<\/li>\n<li>Integruje se se syst\u00e9mem pro ukl\u00e1d\u00e1n\u00ed a anal\u00fdzu protokol\u016f Splunk pro vizualizaci ud\u00e1lost\u00ed a podporu API.<\/li>\n<\/ul>\n<p><b>Nev\u00fdhody<\/b><\/p>\n<ul>\n<li>Slo\u017eit\u00e1 architektura \u2013 vy\u017eaduje \u00fapln\u00e9 nasazen\u00ed Elastic Stack krom\u011b serverov\u00fdch komponent Wazuh.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wazuh\/wazuh\"><b>Source <\/b><\/a><\/noindex><\/p>\n<h3>Prelude OSS<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source syst\u00e9m\u016f pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed\" src=\"\/wp-content\/uploads\/2019\/07\/ff195da95996aaf9d2e268b5e1851a79.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Prelude OSS je open-source verze komer\u010dn\u00ed Prelude SIEM, vyvinut\u00e9 francouzskou spole\u010dnost\u00ed CS. Toto \u0159e\u0161en\u00ed p\u0159edstavuje flexibiln\u00ed modul\u00e1rn\u00ed SIEM syst\u00e9m, kter\u00fd podporuje mnoho form\u00e1t\u016f protokol\u016f a integraci s n\u00e1stroji t\u0159et\u00edch stran jako OSSEC, Snort a s\u00ed\u0165ov\u00fd syst\u00e9m detekce Suricata.<\/p>\n<p>Ka\u017ed\u00e1 ud\u00e1lost je normalizov\u00e1na do zpr\u00e1vy podle form\u00e1tu IDMEF, co\u017e usnad\u0148uje v\u00fdm\u011bnu dat s jin\u00fdmi syst\u00e9my. Ale je tu tak\u00e9 stinn\u00e1 str\u00e1nka \u2014 Prelude OSS je v\u00fdrazn\u011b omezena v\u00fdkonnost\u00ed a funkcionalitou ve srovn\u00e1n\u00ed s komer\u010dn\u00ed verz\u00ed Prelude SIEM a je ur\u010dena sp\u00ed\u0161e pro mal\u00e9 projekty nebo pro studium SIEM \u0159e\u0161en\u00ed a hodnocen\u00ed Prelude SIEM.<\/p>\n<p><b>V\u00fdhody<\/b><\/p>\n<ul>\n<li>Otestovan\u00fd syst\u00e9m, vyv\u00edjen\u00fd od roku 1998;<\/li>\n<li>Podporuje mnoho r\u016fzn\u00fdch form\u00e1t\u016f protokol\u016f;<\/li>\n<li>Normalizuje data do form\u00e1tu IMDEF, co\u017e umo\u017e\u0148uje snadn\u00e9 p\u0159ed\u00e1v\u00e1n\u00ed dat do jin\u00fdch bezpe\u010dnostn\u00edch syst\u00e9m\u016f.<\/li>\n<\/ul>\n<p><b>Nev\u00fdhody<\/b><\/p>\n<ul>\n<li>V\u00fdrazn\u011b omezen\u00e1 co do funkcionality a v\u00fdkonu ve srovn\u00e1n\u00ed s jin\u00fdmi open-source SIEM syst\u00e9my.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Prelude-SIEM\/Prelude-SIEM\"><b>Source <\/b><\/a><\/noindex><\/p>\n<h3>Sagan<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source syst\u00e9m\u016f pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed\" src=\"\/wp-content\/uploads\/2019\/07\/f3c92d91e49721f2a648dcbae057a8d9.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Sagan je vysoce v\u00fdkonn\u00fd SIEM, kter\u00fd zd\u016fraz\u0148uje kompatibilitu se Snortem. Krom\u011b podpory pravidel napsan\u00fdch pro Snort m\u016f\u017ee Sagan zapisovat do datab\u00e1ze Snort a dokonce m\u016f\u017ee b\u00fdt pou\u017eit s rozhran\u00edm Shuil. V podstat\u011b se jedn\u00e1 o lehk\u00e9 v\u00edc-vl\u00e1knov\u00e9 \u0159e\u0161en\u00ed, kter\u00e9 nab\u00edz\u00ed nov\u00e9 funkce a p\u0159itom z\u016fst\u00e1v\u00e1 p\u0159\u00edv\u011btiv\u00e9 pro u\u017eivatele Snortu.<\/p>\n<p><b>V\u00fdhody<\/b><\/p>\n<ul>\n<li>Pln\u011b kompatibiln\u00ed s datab\u00e1z\u00ed Snort, pravidly a u\u017eivatelsk\u00fdm rozhran\u00edm;<\/li>\n<li>V\u00edcev vlaknov\u00e1 architektura zaji\u0161\u0165uje vysokou v\u00fdkonnost.<\/li>\n<\/ul>\n<p><b>Nev\u00fdhody<\/b><\/p>\n<ul>\n<li>Relativn\u011b mlad\u00fd projekt s malou komunitou;<\/li>\n<li>Slo\u017eit\u00fd proces instalace zahrnuj\u00edc\u00ed sestaven\u00ed cel\u00e9ho SIEM z p\u016fvodn\u00edch zdroj\u016f.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/beave\/sagan\/\"><b>Source<\/b><\/a><\/noindex><\/p>\n<h2>Z\u00e1v\u011br<\/h2>\n<p>Ka\u017ed\u00fd z popsan\u00fdch SIEM syst\u00e9m\u016f m\u00e1 sv\u00e9 vlastnosti a omezen\u00ed, a proto je nelze pova\u017eovat za univerz\u00e1ln\u00ed \u0159e\u0161en\u00ed pro jakoukoli organizaci. Av\u0161ak tato \u0159e\u0161en\u00ed maj\u00ed otev\u0159en\u00fd k\u00f3d, co\u017e umo\u017e\u0148uje jejich nasazen\u00ed, testov\u00e1n\u00ed a hodnocen\u00ed bez nadm\u011brn\u00fdch n\u00e1klad\u016f.<\/p>\n<p><b>Co dal\u0161\u00edho zaj\u00edmav\u00e9ho si m\u016f\u017eete p\u0159e\u010d\u00edst na blogu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">Cloud4Y<\/a><\/noindex><\/b><\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/459156\/\">VNIIT\u00c9 planety cel\u00e9: jak v SSSR vymysleli syst\u00e9m \"inteligentn\u00edho domu\"<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/458330\/\">Jak neurointerface pom\u00e1haj\u00ed lidstvu<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/454278\/\">Kybernetick\u00e9 poji\u0161t\u011bn\u00ed na rusk\u00e9m trhu<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/454274\/\">Sv\u011btlo, kamera\u2026 oblak: jak cloudy m\u011bn\u00ed filmov\u00fd pr\u016fmysl<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/453612\/\">Fotbal v oblac\u00edch \u2013 m\u00f3da nebo nezbytnost?<\/a><\/noindex><\/p>\n<p>Sledujte n\u00e1\u0161 <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/cloud4y\">Telegram<\/a><\/noindex>-kan\u00e1l, abyste nep\u0159i\u0161li o dal\u0161\u00ed \u010dl\u00e1nek! P\u00ed\u0161eme maxim\u00e1ln\u011b dvakr\u00e1t t\u00fddn\u011b a pouze relevantn\u011b.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/459442\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e? \u041d\u0435\u0442, \u043d\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430\u0437\u043e\u0432\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0418\u0433\u043e\u0440\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0432\u0447\u0435\u0440\u0430 \u043a\u043e\u043b\u043b\u0435\u0433\u0435 \u041c\u0430\u0440\u0438\u0438. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0441\u0442\u0430\u0440\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043e\u0442\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0432\u0441\u0435 \u0441\u0438\u043b\u044b, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27082,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36204","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-12-21T07:34:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd475 open-source syst\u00e9m\u016f pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed | ProHoster","description":"Co d\u011bl\u00e1 dobr\u00e9ho bezpe\u010dnostn\u00edho pracovn\u00edka v IT oboru.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:16+00:00","article:modified_time":"2020-12-21T07:34:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36204","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:27","updated":"2026-01-22 02:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=36204"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36204\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/27082"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=36204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=36204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=36204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}