{"id":36204,"date":"2019-10-31T22:10:16","date_gmt":"2019-10-31T19:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\/"},"modified":"2020-12-21T09:34:37","modified_gmt":"2020-12-21T07:34:37","slug":"5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","title":{"rendered":"5 avatud l\u00e4htekoodiga turvas\u00fcndmuste haldamise s\u00fcsteemi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvas\u00fcndmuste haldamise s\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/aa62f0bea220d09adad31d5ee9eaa3af.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p><i>Kuidas erineb hea turvamees IT-valdkonnas tavalisest? Ei, mitte sellega, et ta suudab igal hetkel meelde j\u00e4tta, kui palju s\u00f5numeid juht Igor eile kolleeg Maria jaoks saatis. Hea turvamees p\u00fc\u00fcab varakult tuvastada v\u00f5imalikke rikkumisi ja neid reaalajas j\u00e4lgida, tehes k\u00f5ik endast oleneva, et olukord ei eskaleeruks. Turvas\u00fcndmuste haldamise s\u00fcsteemid (SIEM, Security Information and Event Management) lihtsustavad oluliselt \u00fclesannet kiiresti fikseerimise ja katse rikkumiste blokeerimise.<\/i><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTavaliselt \u00fchendavad SIEM-s\u00fcsteemid endas teabe turvalisuse haldamise s\u00fcsteemi ja turvas\u00fcndmuste haldamise s\u00fcsteemi. Oluline omadus on turvas\u00fcndmuste reaalajas anal\u00fc\u00fcs, mis v\u00f5imaldab reageerida neile enne, kui kahju tekib.<\/p>\n<p><b>SIEM-s\u00fcsteemide peamised \u00fclesanded:<\/b><\/p>\n<ul>\n<li>Andmete kogumine ja normaliseerimine<\/li>\n<li>Andmete korrelatsioon<\/li>\n<li>Teavitamine<\/li>\n<li>Visuaalsed armatuurlaud<\/li>\n<li>Andmete salvestamise korraldamine<\/li>\n<li>Andmete otsimine ja anal\u00fc\u00fcs<\/li>\n<li>Aruandlus<\/li>\n<\/ul>\n<h2>SIEM-s\u00fcsteemide k\u00f5rge n\u00f5udluse p\u00f5hjused<\/h2>\n<p>Viimastel aegadel on infos\u00fcsteemide r\u00fcnnakute keerukus ja koordineeritus oluliselt suurenenud. Samuti on keerukam rakendatav turvasaavutuste komplekt \u2013 v\u00f5rgu- ja hostidele suunatud sissetungide avastamise s\u00fcsteemid, DLP-s\u00fcsteemid, viiruset\u00f5rje s\u00fcsteemid ja tulem\u00fc\u00fcrid, haavatavuste skannerid ja muud. Iga kaitses\u00fcsteem genereerib s\u00fcndmuste voogu erineva detailitasemega ning tihti on r\u00fcnnaku tuvastamine v\u00f5imalik vaid erinevate s\u00fcsteemide s\u00fcndmuste \u00fchisosade kaudu.<\/p>\n<p>Paljude kommertslike SIEM-s\u00fcsteemide kohta on palju <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/muk\/blog\/325330\/\">kirjutanud<\/a><\/noindex>, kuid me pakume l\u00fchikest \u00fclevaadet tasuta t\u00e4isfunktsionaalsetest avatud l\u00e4htekoodiga SIEM-s\u00fcsteemidest, mis ei oma kunstlikke piiranguid kasutajate arvule v\u00f5i salvestatavate andmete mahtudele, samuti on need h\u00f5lpsasti laiendatavad ja toetatavad. Loodame, et see aitab hinnata sarnaste s\u00fcsteemide potentsiaali ja teha otsus, kas selliseid lahendusi ettev\u00f5tte \u00e4riprotsessidesse integreerida.<\/p>\n<h3>AlienVault OSSIM<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvas\u00fcndmuste haldamise s\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/f74856a0ce3eeb7ecccc16db6ae5e076.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>AlienVault OSSIM on avatud l\u00e4htekoodiga versioon AlienVault USM-st, mis on \u00fcks juhtivaid kommerts SIEM-s\u00fcsteeme. OSSIM on raamistik, mis koosneb mitmest avatud l\u00e4htekoodiga projektist, sealhulgas R\u00fcnde avastamise s\u00fcsteem Snort, v\u00f5rgu ja s\u00f5lmede j\u00e4lgimise s\u00fcsteem Nagios, hosti r\u00fcnde avastamise s\u00fcsteem OSSEC ja haavatavuste skanner OpenVAS.<\/p>\n<p>Seadmete j\u00e4lgimiseks kasutatakse AlienVault Agent'i, mis saadab logid hostist syslog formaadis GELF platvormile v\u00f5i v\u00f5ib kasutada pistikprogrammi kolmandate osapoolte teenustega integreerimiseks, nagu n\u00e4iteks Cloudflare'i veebilehtede tagasipoolne proksiteenus v\u00f5i Okta mitme faktoriga autentimise s\u00fcsteem.<\/p>\n<p>USM versioon erineb OSSIM-st laienenud logide haldamise, pilveinfrastruktuuri j\u00e4lgimise, automatiseerimise ja uuendatud ohuteabe ning visualiseerimise funktsioonide poolest.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>Ehitatud usaldusv\u00e4\u00e4rsete avatud l\u00e4htekoodiga projektide p\u00f5hjal;<\/li>\n<li>Suur kasutajate ja arendajate kogukond.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Ei toeta pilveplatvormide j\u00e4lgimist (nt AWS v\u00f5i Azure);<\/li>\n<li>Puudub logide haldamine, visualiseerimine, automatiseerimine ja integreerimine kolmandate osapoolte teenustega.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossimlabs\/ossim\"><b>Allikas<\/b><\/a><\/noindex><\/p>\n<h3>MozDef (Mozilla Defense Platform)<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvas\u00fcndmuste haldamise s\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/028c667490a6b0de1f0dd6b6cc283f93.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Mozilla loodud SIEM-s\u00fcsteem MozDef on automatiseerinud turvaintsidentide t\u00f6\u00f6tlemise protsessid. S\u00fcsteem on v\u00e4lja t\u00f6\u00f6tatud nullist, et tagada maksimaalne t\u00f6\u00f6kiirus, skaleeritavus ja rikekindlus, kasutades mikroteenuste arhitektuuri \u2013 iga teenus t\u00f6\u00f6tab Docker konteineris.<\/p>\n<p>Nagu OSSIM, on MozDef ehitatud ajaga t\u00f5estatud avatud l\u00e4htekoodiga projektide p\u00f5hjal, sealhulgas logide indekseerimise ja otsimise moodul Elasticsearch, Meteor platvorm paindliku veebiliidese loomiseks ning Kibana pistikprogramm visualiseerimise ja graafikute loomise jaoks.<\/p>\n<p>S\u00fcndmuste korelatsioon ja teavitamine toimub Elasticsearchi p\u00e4ringute abil, mis v\u00f5imaldab kirjutada enda s\u00fcndmuste t\u00f6\u00f6tlemise ja teavitamise reegleid kasutades Pythonit. Mozilla s\u00f5nul suudab MozDef t\u00f6\u00f6delda \u00fcle 300 miljoni s\u00fcndmuse p\u00e4evas. MozDef aktsepteerib s\u00fcndmusi ainult JSON formaadis, kuid on integreeritud kolmandate osapoolte teenustega.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>Ei kasuta agente \u2013 t\u00f6\u00f6tab tavaliste JSON logidega;<\/li>\n<li>Kergesti skaleeritav mikroteenuste arhitektuuri t\u00f5ttu;<\/li>\n<li>Toetab pilveteenuste andmeallikaid, sealhulgas AWS CloudTraili ja GuardDuty.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Uus ja v\u00e4hem v\u00e4ljakujunenud s\u00fcsteem.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/MozDef\"><b>Allikas<\/b><\/a><\/noindex><\/p>\n<h3>Wazuh<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvas\u00fcndmuste haldamise s\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/b03ade4628c4cca1dd732a1e3a1f320f.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Wazuh arenes algselt OSSEC-i haruna, mis on \u00fcks populaarsemaid avatud l\u00e4htekoodiga SIEM-e. N\u00fc\u00fcd on see ainulaadne lahendus, millel on uus funktsionaalsus, parandatud vead ja optimeeritud arhitektuur.<\/p>\n<p>S\u00fcsteem on \u00fcles ehitatud ElasticStacki (Elasticsearch, Logstash, Kibana) virnale ning toetab nii andmete kogumist agendi p\u00f5hjal kui ka s\u00fcsteemi logide vastuv\u00f5ttu. See teeb selle t\u00f5husaks seadmete j\u00e4lgimiseks, mis genereerivad logisid, kuid ei toeta agendi installimist \u2013 pidevused, printerid ja perifeeria.<\/p>\n<p>Wazuh toetab olemasolevaid OSSEC-i agente ja pakub isegi juhendit \u00fclemiseks OSSEC-ilt Wazuh-ile. Kuigi OSSEC-i toetatakse endiselt aktiivselt, peetakse Wazuh-d OSSEC-i j\u00e4tkuks uue veebiliidese, REST API, ulatuslikuma reeglistiku ja paljude muude t\u00e4iustuste t\u00f5ttu.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>Rajatud ja \u00fchilduv populaarse SIEM-i OSSEC-iga;<\/li>\n<li>Toetab erinevaid installimise variante: Docker, Puppet, Chef, Ansible;<\/li>\n<li>Toetab pilveteenuste j\u00e4lgimist, sealhulgas AWS ja Azure;<\/li>\n<li>Sisaldab terviklikku reeglite kogumit, et tuvastada mitmesuguseid r\u00fcnnakute t\u00fc\u00fcpe ja v\u00f5imaldab nende sidumist PCI DSS v3.1 ja CIS-i n\u00f5uetega.<\/li>\n<li>Integreerub logide salvestamise ja anal\u00fc\u00fcsi s\u00fcsteemi Splunkiga, et visualiseerida s\u00fcndmusi ja toetada API-d.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Kompleksne arhitektuur \u2014 n\u00f5uab t\u00e4ielikku Elastic Stacki juurutamist koos Wazuh serveri komponentidega.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wazuh\/wazuh\"><b>Allikas <\/b><\/a><\/noindex><\/p>\n<h3>Prelude OSS<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvas\u00fcndmuste haldamise s\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/ff195da95996aaf9d2e268b5e1851a79.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Prelude OSS on kaubandusliku Prelude SIEM-i avatud l\u00e4htekoodiga versioon, mille on v\u00e4lja t\u00f6\u00f6tanud Prantsuse ettev\u00f5te CS. Lahendus on paindlik ja modulaarne SIEM-s\u00fcsteem, toetades paljusid logivorme ning integreerimist selliste kolmandate osapoolte t\u00f6\u00f6riistadega nagu OSSEC, Snort ja Suricata v\u00f5rgustiku tuvastamise s\u00fcsteem.<\/p>\n<p>Iga s\u00fcndmus normaliseeritakse IDMEF formaadiga s\u00f5numiks, mis lihtsustab andmete vahetamist teiste s\u00fcsteemidega. Kuid on ka varjuk\u00fclg \u2014 Prelude OSS on oma j\u00f5udluse ja funktsionaalsuse poolest tugevalt piiratud v\u00f5rreldes kaubandusliku Prelude SIEM-iga ning on pigem m\u00f5eldud v\u00e4ikestele projektidele v\u00f5i SIEM lahenduste uurimiseks ja Prelude SIEM-i hindamiseks.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>Katsutud s\u00fcsteem, mille arendamine algas 1998. aastal;<\/li>\n<li>Toetab mitmeid erinevaid logivorme;<\/li>\n<li>Normaliseerib andmed IMDEF formaati, mis v\u00f5imaldab andmete edastamist teistele turvas\u00fcsteemidele.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Oluliselt piiratud funktsionaalsuse ja j\u00f5udlusega v\u00f5rreldes teiste avatud l\u00e4htekoodiga SIEM-s\u00fcsteemidega.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Prelude-SIEM\/Prelude-SIEM\"><b>Allikas <\/b><\/a><\/noindex><\/p>\n<h3>Sagan<\/h3>\n<p><img decoding=\"async\" alt=\"5 avatud l\u00e4htekoodiga turvas\u00fcndmuste haldamise s\u00fcsteemi\" src=\"\/wp-content\/uploads\/2019\/07\/f3c92d91e49721f2a648dcbae057a8d9.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Sagan on suure j\u00f5udlusega SIEM, mis r\u00f5hutab \u00fchilduvust Snortiga. Peale Snortis kirjutatud reeglite toe suudab Sagan salvestada ka Snorti andmebaasi ning seda saab kasutada ka Shuili liidese kaudu. Tegemist on kergkaalulise mitme l\u00f5imega lahendusega, mis pakub uusi funktsioone, j\u00e4\u00e4des siiski Snorti kasutajatele s\u00f5bralikuks.<\/p>\n<p><b>Eelised<\/b><\/p>\n<ul>\n<li>T\u00e4ielikult \u00fchilduv Snorti andmebaasi, reeglite ja kasutajaliidesega;<\/li>\n<li>Mitme l\u00f5imega arhitektuur tagab k\u00f5rge j\u00f5udluse.<\/li>\n<\/ul>\n<p><b>Puudused<\/b><\/p>\n<ul>\n<li>Suhtega noor projekt, millel on v\u00e4ike kogukond;<\/li>\n<li>Kohandatud installimisprotsess, mis h\u00f5lmab kogu SIEM-i allika koodist \u00fclesehitamist.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/beave\/sagan\/\"><b>Allikas<\/b><\/a><\/noindex><\/p>\n<h2>Kokkuv\u00f5te<\/h2>\n<p>Igal kirjeldatud SIEM-s\u00fcsteemil on oma omadused ja piirangud, seega ei saa neid nimetada universaalseks lahenduseks iga organisatsiooni jaoks. Siiski on nende lahenduste kood avatud, mis v\u00f5imaldab neid seadistada, testida ja hinnata ilma liigsete kuludeta.<\/p>\n<p><b>Mida huvitavat v\u00f5iks veel lugeda blogist <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">Cloud4Y<\/a><\/noindex><\/b><\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/459156\/\">VNIITE kogu maailmas: kuidas NSV Liidus v\u00e4ljam\u00f5eldud \"nutika kodu\" s\u00fcsteem<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/458330\/\">Kuidas neuroliidesed aitavad inimkonda<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/454278\/\">Kyberkindlustus Venemaa turul<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/454274\/\">Valgus, kaamera\u2026 pilv: kuidas pilved muudavad kinoindustria.<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/453612\/\">Jalgpall pilvedes \u2014 mood v\u00f5i vajadus?<\/a><\/noindex><\/p>\n<p>Telli meie <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/cloud4y\">Telegram<\/a><\/noindex>-kanal, et mitte j\u00e4\u00e4da ilma j\u00e4rgmise artikli lugemisest! Kirjutame mitte sagedamini kui kaks korda n\u00e4dalas ja ainult olulistel teemadel.<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/459442\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e? \u041d\u0435\u0442, \u043d\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430\u0437\u043e\u0432\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0418\u0433\u043e\u0440\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0432\u0447\u0435\u0440\u0430 \u043a\u043e\u043b\u043b\u0435\u0433\u0435 \u041c\u0430\u0440\u0438\u0438. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0441\u0442\u0430\u0440\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043e\u0442\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0432\u0441\u0435 \u0441\u0438\u043b\u044b, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27082,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36204","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-12-21T07:34:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd475 avatud l\u00e4htekoodiga turvaseire s\u00fcsteemi | ProHoster","description":"Mis teeb IT-valdkonnas heast turvaspetsialistist.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:16+00:00","article:modified_time":"2020-12-21T07:34:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36204","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:27","updated":"2026-01-22 02:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36204"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36204\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27082"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}