{"id":36204,"date":"2019-10-31T22:10:16","date_gmt":"2019-10-31T19:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\/"},"modified":"2020-12-21T09:34:37","modified_gmt":"2020-12-21T07:34:37","slug":"5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","title":{"rendered":"5 avatud l\u00e4htekoodiga turvaeventide halduss\u00fcsteemi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvaeventide halduss\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/aa62f0bea220d09adad31d5ee9eaa3af.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p><i>Kuidas erineb hea bezpeka IT-valdkonnas tavalisest? Ei, mitte selle poolest, et ta suudab igal ajahetkel meelde tuletada, kui palju s\u00f5numeid juht Igor eile kolleeg Maria'le saatis. Hea bezpek \u00fcritab tuvastada v\u00f5imalikke rikkumisi ette, p\u00fc\u00fcdes neid reaalajas kinni, pannes k\u00f5ik j\u00f5ud, et takistada intsidenti j\u00e4tkumist. Turvas\u00fcndmuste haldamise s\u00fcsteemid (SIEM, Security Information and Event Management) lihtsustavad oluliselt kiiret fikseerimist ja mis tahes rikkumis\u00fcrituste blokeerimist.<\/i><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTraditsiooniliselt \u00fchendavad SIEM-s\u00fcsteemid endas infotehnoloogia turvalisuse haldamise s\u00fcsteemi ja turvas\u00fcndmuste haldamise s\u00fcsteemi. Oluline omadus on turvas\u00fcndmuste reaalajas anal\u00fc\u00fcs, mis v\u00f5imaldab reageerida neile enne olemasoleva kahju teket.<\/p>\n<p><b>SIEM-s\u00fcsteemide p\u00f5hifunktsioonid:<\/b><\/p>\n<ul>\n<li>Andmete kogumine ja normaliseerimine<\/li>\n<li>Andmete korrelatsioon<\/li>\n<li>Teavitamine<\/li>\n<li>Visualiseerimise paneelid<\/li>\n<li>Andmete s\u00e4ilitamise korraldamine<\/li>\n<li>Andmete otsing ja anal\u00fc\u00fcs<\/li>\n<li>Aruandlus<\/li>\n<\/ul>\n<h2>SIEM-s\u00fcsteemide k\u00f5rge n\u00f5udluse p\u00f5hjused<\/h2>\n<p>Viimasel ajal on r\u00fcnnakute keerukus ja koordineeritus infotehnoloogilistele s\u00fcsteemidele oluliselt kasvanud. Samuti on keerulisemaks muutunud ka rakendatavad turvameetmed \u2014 v\u00f5rgu- ja hostimisr\u00fcnde tuvastamise s\u00fcsteemid, DLP-s\u00fcsteemid, viiruset\u00f5rje s\u00fcsteemid, tulem\u00fc\u00fcrid, haavatavuste skannerid jne. Iga kaitsevahend genereerib s\u00fcndmuste voo erineva detailitasemega ja sageli on r\u00fcnnakut v\u00f5imalik n\u00e4ha ainult erinevate s\u00fcsteemide s\u00fcndmuste \u00fclekattest.<\/p>\n<p>K\u00f5ikv\u00f5imalike kommertsi SIEM-s\u00fcsteemide kohta on kirjutatud palju <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/muk\/blog\/325330\/\">asju<\/a><\/noindex>, kuid me pakume l\u00fchikest \u00fclevaadet tasuta t\u00e4isversioonist avatud l\u00e4htekoodiga SIEM-s\u00fcsteemidest, mis ei oma kunstlikke piiranguid kasutajate arvu v\u00f5i talletatavate andmete mahtude osas, ning mida on lihtne skaleerida ja hallata. Loodame, et see aitab hinnata selliste s\u00fcsteemide potentsiaali ja teha otsus, kas integreerida need lahendused ettev\u00f5tte \u00e4riprotsessidesse.<\/p>\n<h3>AlienVault OSSIM<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvaeventide halduss\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/f74856a0ce3eeb7ecccc16db6ae5e076.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>AlienVault OSSIM \u2013 avatud l\u00e4htekoodiga versioon AlienVault USM-ist, mis on \u00fcks juhtivaid kommertsi SIEM-s\u00fcsteeme. OSSIM on raamistik, mis koosneb mitmest avatud l\u00e4htekoodiga projektist, sealhulgas v\u00f5rgu sissetungimise avastamise s\u00fcsteemist Snort, v\u00f5rgu ja s\u00f5lmede monitooringus\u00fcsteemist Nagios, hostide sissetungimise avastamise s\u00fcsteemist OSSEC ja haavatavuste skannerist OpenVAS.<\/p>\n<p>Seadmete monitoorimiseks kasutatakse AlienVault Agent-i, mis saadab hostilt logid syslog formaadis GELF platvormile v\u00f5i v\u00f5ib kasutada pistikprogrammi integreerimiseks kolmandate osapoolte teenustega, nagu Cloudflare'i veebisaitide p\u00f6\u00f6rdp\u00f6\u00f6rdusproks v\u00f5i Okta mitme faktoori autentimise s\u00fcsteem.<\/p>\n<p>USM versioon erineb OSSIM-ist laiendatud logihaldusfunktsioonide, pilveteenuste monitooringu, automatiseerimise ning v\u00e4rskendatava ohuteabe ja visualiseerimise poolest.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>Kasutatakse usaldusv\u00e4\u00e4rseid avatud l\u00e4htekoodiga projekte;<\/li>\n<li>Suur kasutajate ja arendajate kogukond.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Ei toeta pilveteenuste (nt AWS v\u00f5i Azure) monitooringut;<\/li>\n<li>Puudub logihaldus, visualiseerimine, automatiseerimine ja integreerimine kolmandate osapoolte teenustega.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossimlabs\/ossim\"><b>Allikas<\/b><\/a><\/noindex><\/p>\n<h3>MozDef (Mozilla kaitseplatvorm)<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvaeventide halduss\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/028c667490a6b0de1f0dd6b6cc283f93.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Mozilla v\u00e4lja t\u00f6\u00f6tatud SIEM-s\u00fcsteem MozDef on m\u00f5eldud turvas\u00fcndmuste t\u00f6\u00f6tlemise protsesside automatiseerimiseks. S\u00fcsteem on loodud nullist maksimaalse d\u00fcnaamilisuse, skaleeritavuse ja veaparanduse saavutamiseks, mikroteenuste arhitektuuriga \u2013 iga teenus t\u00f6\u00f6tab Docker-konteineris.<\/p>\n<p>Nagu OSSIM, on MozDef rajatud ajaliselt t\u00f5estatud avatud l\u00e4htekoodiga projektidele, sealhulgas logide indekseerimise ja otsingu jaoks Elasticsearch, Meteor platvormi paindliku veebiliidese loomiseks ja rain Kibana liidese visualiseerimiseks ja graafikute loomiseks.<\/p>\n<p>S\u00fcndmuste korrelatsioon ja teavitamine toimub Elasticsearchi p\u00e4ringu abil, mis v\u00f5imaldab kirjutada oma s\u00fcndmust\u00f6\u00f6tlus- ja teavitamisreegleid kasutades Pythonit. Mozilla s\u00f5nul suudab MozDef t\u00f6\u00f6delda rohkem kui 300 miljonit s\u00fcndmust p\u00e4evas. MozDef v\u00f5tab s\u00fcndmusi vastu ainult JSON-formaadis, kuid sisaldab integreerimist kolmandate osapoolte teenustega.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>Ei kasuta agente \u2013 t\u00f6\u00f6tab standardsete JSON-logidega;<\/li>\n<li>Lihtsalt skaleeritav mikroteenuste arhitektuuri t\u00f5ttu;<\/li>\n<li>Toetab pilveteenuste andmeallikaid, sealhulgas AWS CloudTrail ja GuardDuty.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Uus ja v\u00e4hem vakiinnustatud s\u00fcsteem.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/MozDef\"><b>Allikas<\/b><\/a><\/noindex><\/p>\n<h3>Wazuh<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvaeventide halduss\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/b03ade4628c4cca1dd732a1e3a1f320f.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Wazuh arenes v\u00e4lja OSSEC-i forkina, mis on \u00fcks populaarsemaid avatud l\u00e4htekoodiga SIEM-e. N\u00fc\u00fcd on see ainulaadne lahendus uute funktsioonidega, parandatud vigadega ja optimeeritud arhitektuuriga.<\/p>\n<p>S\u00fcsteem on \u00fcles ehitatud ElasticStack (Elasticsearch, Logstash, Kibana) virnale ning toetab nii agentide p\u00f5hist andmete kogumist kui ka s\u00fcsteemilogide vastuv\u00f5ttu. See muudab selle t\u00f5husaks seadmete j\u00e4lgimiseks, mis genereerivad logisid, kuid ei toeta agendi installimist \u2013 v\u00f5rgu seadmed, printerid ja perifeeria.<\/p>\n<p>Wazuh toetab olemasolevaid OSSEC-i agente ning pakub isegi juhendit \u00fcleminekuks OSSEC-ilt Wazuh-ile. Kuigi OSSEC on endiselt aktiivselt toetatud, peetakse Wazuh-d OSSEC-i j\u00e4tkuks t\u00e4nu uue veebiliidese, REST API, t\u00e4ielikuma reeglikogumi ja paljude teiste t\u00e4iustuste lisamisele.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>P\u00f5hineb ja on \u00fchilduv populaarse SIEM-i OSSEC-iga;<\/li>\n<li>Toetab erinevaid installatsiooniv\u00f5imalusi: Docker, Puppet, Chef, Ansible;<\/li>\n<li>Toetab pilveteenuste j\u00e4lgimist, sealhulgas AWS ja Azure;<\/li>\n<li>Sisaldab komplektset reeglite kogumit, et tuvastada mitmesuguseid r\u00fcnnakute liike ning v\u00f5imaldab neid vastavusse viia PCI DSS v3.1 ja CIS-iga.<\/li>\n<li>Integreerub Splunki logide salvestamise ja anal\u00fc\u00fcsi s\u00fcsteemiga, et visualiseerida s\u00fcndmusi ja toetada API-d.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Kompleksne arhitektuur \u2014 n\u00f5uab Elastic Stack t\u00e4ielikku juurutamist koos Wazuh'i serverikomponentidega.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wazuh\/wazuh\"><b>Allikas <\/b><\/a><\/noindex><\/p>\n<h3>Prelude OSS<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvaeventide halduss\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/ff195da95996aaf9d2e268b5e1851a79.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Prelude OSS on avatud l\u00e4htekoodiga versioon kaubanduslikust Prelude SIEM-ist, mille on v\u00e4lja t\u00f6\u00f6tanud Prantsuse ettev\u00f5te CS. Lahendus on paindlik ja modulaarne SIEM-s\u00fcsteem, mis toetab mitmeid logivorminguid ning integreerub kolmandate osapoolte t\u00f6\u00f6riistadega nagu OSSEC, Snort ja v\u00f5rguavastuss\u00fcsteem Suricata.<\/p>\n<p>Iga s\u00fcndmus normaliseeritakse IDMEF formaadis s\u00f5numiks, mis lihtsustab andmevahetust teiste s\u00fcsteemidega. Ent on ka \u00fcks miinus \u2014 Prelude OSS on j\u00f5udluse ja funktsionaalsuse poolest tugevasti piiratud v\u00f5rreldes kaubandusliku versiooniga Prelude SIEM, ning see on pigem m\u00f5eldud v\u00e4ikestele projektidele v\u00f5i SIEM lahenduste \u00f5ppimiseks ja Prelude SIEM-i hindamiseks.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>Aja testitud s\u00fcsteem, mida arendatakse alates 1998. aastast;<\/li>\n<li>Toetab mitmeid erinevaid logifaili formaate;<\/li>\n<li>Normeerib andmed IMDEF formaati, mis v\u00f5imaldab andmete lihtsat edastamist muudesse turvas\u00fcsteemidesse.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Funktsionaalsus ja tootlikkus on oluliselt piiratud v\u00f5rreldes teiste avatud l\u00e4htekoodiga SIEM-s\u00fcsteemidega.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Prelude-SIEM\/Prelude-SIEM\"><b>Allikas <\/b><\/a><\/noindex><\/p>\n<h3>Sagan<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvaeventide halduss\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/f3c92d91e49721f2a648dcbae057a8d9.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Sagan on k\u00f5rge j\u00f5udlusega SIEM, mis r\u00f5hutab \u00fchilduvust Snortiga. Lisaks Snorti jaoks kirjutatud reeglite toetusele suudab Sagan salvestada andmeid Snorti andmebaasi ja seda saab kasutada ka Shuili liidese kaudu. Sisuliselt on see kerge mitme l\u00f5ime lahendus, mis pakub uusi funktsioone, olles samal ajal Snorti kasutajatele s\u00f5bralik.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>T\u00e4ielikult \u00fchilduv Snorti andmebaasi, reeglite ja kasutajaliidesega;<\/li>\n<li>Mitme l\u00f5ime arhitektuur tagab k\u00f5rge j\u00f5udluse.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Suhteliselt noor projekt, millel on v\u00e4ike kogukond;<\/li>\n<li>Kompaktne installimisprotsess, mis h\u00f5lmab kogu SIEMi allikakoodist kogu koostamist.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/beave\/sagan\/\"><b>Allikas<\/b><\/a><\/noindex><\/p>\n<h2>Kokkuv\u00f5te<\/h2>\n<p>Iga kirjeldatud SIEM-s\u00fcsteem on ainulaadne ning neil on omad erip\u00e4rad ja piirangud, mist\u00f5ttu ei saa neid pidada universaalseks lahenduseks igale organisatsioonile. Siiski on nende lahenduste l\u00e4htekood avatud, mis v\u00f5imaldab neid rakendada, testida ja hinnata ilma liialt suurte kuludeta.<\/p>\n<p><b>Mida huvitavat veel blogist lugeda <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">Cloud4Y<\/a><\/noindex><\/b><\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/459156\/\">VNIITE - kuidas N\u00f5ukogude Liidus v\u00e4lja m\u00f5eldi 'nutika kodu' s\u00fcsteem<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/458330\/\">Kuidas neuroliidesed aitavad inimkonda<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/454278\/\">K\u00fcbersiis on Venemaa turul<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/454274\/\">Valgus, kaamera\u2026 pilv: kuidas pilved muudavad kinoindust<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/453612\/\">Jalgpall pilvedes \u2013 moes v\u00f5i vajalik?<\/a><\/noindex><\/p>\n<p>Liituge meiega <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/cloud4y\">Telegram<\/a><\/noindex>-kanal, et mitte j\u00e4\u00e4da ilma j\u00e4rgnevast artiklist! Kirjutame mitte tihedamini kui kaks korda n\u00e4dalas ja ainult asjalikult.<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/459442\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e? \u041d\u0435\u0442, \u043d\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430\u0437\u043e\u0432\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0418\u0433\u043e\u0440\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0432\u0447\u0435\u0440\u0430 \u043a\u043e\u043b\u043b\u0435\u0433\u0435 \u041c\u0430\u0440\u0438\u0438. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0441\u0442\u0430\u0440\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043e\u0442\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0432\u0441\u0435 \u0441\u0438\u043b\u044b, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27082,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36204","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e? \u041d\u0435\u0442, \u043d\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430\u0437\u043e\u0432\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0418\u0433\u043e\u0440\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0432\u0447\u0435\u0440\u0430 \u043a\u043e\u043b\u043b\u0435\u0433\u0435 \u041c\u0430\u0440\u0438\u0438. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0441\u0442\u0430\u0440\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043e\u0442\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0432\u0441\u0435 \u0441\u0438\u043b\u044b, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e? \u041d\u0435\u0442, \u043d\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430\u0437\u043e\u0432\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0418\u0433\u043e\u0440\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0432\u0447\u0435\u0440\u0430 \u043a\u043e\u043b\u043b\u0435\u0433\u0435 \u041c\u0430\u0440\u0438\u0438. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0441\u0442\u0430\u0440\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043e\u0442\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0432\u0441\u0435 \u0441\u0438\u043b\u044b, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-12-21T07:34:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd475 avatud l\u00e4htekoodiga turvas\u00fcndmuste haldamise s\u00fcsteemi | ProHoster","description":"Mille poolest erineb hea IT-sektori turvaja tavalisest? Ei, mitte sellega, et ta suudab igal ajal m\u00e4letada, kui palju s\u00f5numeid juht Albert eile kolleeg Maria'ile saatis. Hea turvaja p\u00fc\u00fcab v\u00f5imalikke rikkumisi varakult avastada ja neid reaalajas j\u00e4lgida, tehes k\u00f5ik endast oleneva, et juhtum ei korduks. Turvas\u00fcndmuste haldamise s\u00fcsteemid","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e? \u041d\u0435\u0442, \u043d\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430\u0437\u043e\u0432\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0418\u0433\u043e\u0440\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0432\u0447\u0435\u0440\u0430 \u043a\u043e\u043b\u043b\u0435\u0433\u0435 \u041c\u0430\u0440\u0438\u0438. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0441\u0442\u0430\u0440\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043e\u0442\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0432\u0441\u0435 \u0441\u0438\u043b\u044b, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:16+00:00","article:modified_time":"2020-12-21T07:34:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36204","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:27","updated":"2026-01-22 02:25:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36204"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36204\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27082"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}