{"id":36204,"date":"2019-10-31T22:10:16","date_gmt":"2019-10-31T19:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\/"},"modified":"2020-12-21T09:34:37","modified_gmt":"2020-12-21T07:34:37","slug":"5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","title":{"rendered":"5 sisteme open-source de gestionare a evenimentelor de securitate","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"5 sisteme open-source de gestionare a evenimentelor de securitate\" src=\"\/wp-content\/uploads\/2019\/07\/aa62f0bea220d09adad31d5ee9eaa3af.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p><i>Ce difer\u0103 un bun specialist \u00een securitate IT de unul obi\u0219nuit? Nu, nu este vorba doar despre faptul c\u0103 acesta poate enumera din memorie, \u00een orice moment, c\u00e2te mesaje managerul Igor a trimis ieri colegei Maria. Un bun specialist \u00een securitate se str\u0103duie\u0219te s\u0103 identifice posibilele \u00eenc\u0103lc\u0103ri \u00eenainte de a se produce \u0219i s\u0103 le detecteze \u00een timp real, depun\u00e2nd toate eforturile pentru a preveni continuarea incidentului. Sistemele de gestionare a evenimentelor de securitate (SIEM, de la Security Information and Event Management) simplific\u0103 semnificativ sarcina de a \u00eenregistra rapid \u0219i de a bloca orice \u00eencercare de \u00eenc\u0103lcare.<\/i><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTradi\u021bional, sistemele SIEM combineaz\u0103 sistemele de management al securit\u0103\u021bii informa\u021biei \u0219i sistemele de management al evenimentelor de securitate. O caracteristic\u0103 important\u0103 a acestor sisteme este analiza evenimentelor de securitate \u00een timp real, ceea ce permite reac\u021bionarea la acestea \u00eenainte de a provoca daune existente.<\/p>\n<p><b>Principalele sarcini ale sistemelor SIEM:<\/b><\/p>\n<ul>\n<li>Colectarea \u0219i normalizarea datelor<\/li>\n<li>Corelarea datelor<\/li>\n<li>Alertele<\/li>\n<li>Panourile de vizualizare<\/li>\n<li>Organizarea stoc\u0103rii datelor<\/li>\n<li>C\u0103utarea \u0219i analiza datelor<\/li>\n<li>Raportarea<\/li>\n<\/ul>\n<h2>Motivele cererii ridicate pentru sistemele SIEM<\/h2>\n<p>\u00cen ultima perioad\u0103, complexitatea \u0219i coordonarea atacurilor asupra sistemelor informatice au crescut semnificativ. \u00cen plus, complexitatea mediului de protec\u021bie a informa\u021biilor \u2013 sistemele de detec\u021bie a intruziunilor pe re\u021bea \u0219i gazd\u0103, sistemele DLP, solu\u021biile antivirus \u0219i firewall-urile, scanerele de vulnerabilit\u0103\u021bi \u0219i altele \u2013 devine tot mai mare. Fiecare instrument de protec\u021bie genereaz\u0103 un flux de evenimente cu detalii variate, iar de multe ori, o atac poate fi observat doar prin suprapunerea evenimentelor din diferite sisteme.<\/p>\n<p>Despre diferitele sisteme comerciale SIEM s-a scris multe, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/muk\/blog\/325330\/\">dar noi oferim o prezentare general\u0103 scurt\u0103 a sistemelor SIEM open-source gratuite complete, care nu au restric\u021bii artificiale \u00een ceea ce prive\u0219te num\u0103rul de utilizatori sau volumele de date acceptate\/stocate, \u0219i care sunt u\u0219or de scalat \u0219i de \u00eentre\u021binut. Sper\u0103m c\u0103 acest lucru va ajuta la evaluarea poten\u021bialului acestor sisteme \u0219i va ajuta la luarea unei decizii cu privire la integrarea acestor solu\u021bii \u00een procesele de afaceri ale companiei.<\/a><\/noindex>AlienVault OSSIM<\/p>\n<h3>AlienVault OSSIM<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme open-source de gestionare a evenimentelor de securitate\" src=\"\/wp-content\/uploads\/2019\/07\/f74856a0ce3eeb7ecccc16db6ae5e076.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>AlienVault OSSIM este versiunea open-source a AlienVault USM, unul dintre cele mai importante sisteme comerciale SIEM. OSSIM reprezint\u0103 un cadru compus din mai multe proiecte cu surs\u0103 disponibil\u0103, inclusiv sistemul de detec\u021bie a intruziunilor Snort, sistemul de monitorizare a re\u021belelor \u0219i nodurilor Nagios, sistemul de detec\u021bie a intruziunilor pe gazd\u0103 OSSEC \u0219i scannerul de vulnerabilit\u0103\u021bi OpenVAS.<\/p>\n<p>Pentru monitorizarea dispozitivelor se utilizeaz\u0103 AlienVault Agent, care trimite jurnale de pe gazd\u0103 \u00een format syslog c\u0103tre platforma GELF sau poate folosi un plugin pentru integrarea cu servicii externe, precum serviciul de proxy invers Cloudflare sau sistemul de autentificare multifactorial\u0103 Okta.<\/p>\n<p>Versiunea USM se deosebe\u0219te de OSSIM prin func\u021bionalit\u0103\u021bile avansate de gestionare a jurnalele, monitorizarea infrastructurii de cloud, automatizare, \u0219i informa\u021bii actualizate despre amenin\u021b\u0103ri \u0219i vizualizare.<\/p>\n<p><b>Avantajele<\/b><\/p>\n<ul>\n<li>Construit pe proiecte open-source de \u00eencredere;<\/li>\n<li>O comunitate mare de utilizatori \u0219i dezvoltatori.<\/li>\n<\/ul>\n<p><b>Dezavantaje<\/b><\/p>\n<ul>\n<li>Nu suport\u0103 monitorizarea platformelor cloud (de exemplu, AWS sau Azure);<\/li>\n<li>Lipsa gestion\u0103rii jurnalele, vizualiz\u0103rii, automatiz\u0103rii \u0219i integr\u0103rii cu servicii externe.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossimlabs\/ossim\"><b>Surs\u0103<\/b><\/a><\/noindex><\/p>\n<h3>MozDef (Mozilla Defense Platform)<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme open-source de gestionare a evenimentelor de securitate\" src=\"\/wp-content\/uploads\/2019\/07\/028c667490a6b0de1f0dd6b6cc283f93.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Sistemul SIEM dezvoltat de Mozilla, MozDef, este utilizat pentru automatizarea proceselor de gestionare a incidentelor de securitate. Sistemul a fost dezvoltat de la zero pentru a ob\u021bine maxim\u0103 performan\u021b\u0103, scalabilitate \u0219i rezilien\u021b\u0103, av\u00e2nd o arhitectur\u0103 de microservicii \u2013 fiecare serviciu func\u021bioneaz\u0103 \u00eentr-un container Docker.<\/p>\n<p>La fel ca OSSIM, MozDef este construit pe proiecte open-source consacrate, care includ un modul de indexare a jurnalele \u0219i c\u0103utare Elasticsearch, platforma Meteor pentru crearea unei interfe\u021be web flexibile, \u0219i pluginul Kibana pentru vizualizare \u0219i grafice.<\/p>\n<p>Corelarea evenimentelor \u0219i alertele se realizeaz\u0103 folosind interog\u0103ri Elasticsearch, permi\u021b\u00e2nd definirea propriilor reguli pentru procesarea evenimentelor \u0219i alertele folosind Python. Conform celor spuse de Mozilla, MozDef poate procesa mai mult de 300 de milioane de evenimente pe zi. MozDef accept\u0103 evenimente doar \u00een format JSON, dar exist\u0103 integrare cu servicii externe.<\/p>\n<p><b>Avantajele<\/b><\/p>\n<ul>\n<li>Nu folose\u0219te agen\u021bi \u2013 func\u021bioneaz\u0103 cu jurnale standard JSON;<\/li>\n<li>Se scaleaz\u0103 u\u0219or datorit\u0103 arhitecturii de microservicii;<\/li>\n<li>Suport\u0103 surse de date din servicii cloud, inclusiv AWS CloudTrail \u0219i GuardDuty.<\/li>\n<\/ul>\n<p><b>Dezavantaje<\/b><\/p>\n<ul>\n<li>Un nou sistem, mai pu\u021bin stabilizat.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/MozDef\"><b>Surs\u0103<\/b><\/a><\/noindex><\/p>\n<h3>Wazuh<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme open-source de gestionare a evenimentelor de securitate\" src=\"\/wp-content\/uploads\/2019\/07\/b03ade4628c4cca1dd732a1e3a1f320f.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Wazuh a \u00eenceput ca un fork al OSSEC, unul dintre cele mai populare SIEM cu surs\u0103 deschis\u0103. Acum este o solu\u021bie unic\u0103 cu func\u021bionalit\u0103\u021bi noi, erori corectate \u0219i o arhitectur\u0103 optimizat\u0103.<\/p>\n<p>Sistemul este construit pe stiva ElasticStack (Elasticsearch, Logstash, Kibana) \u0219i suport\u0103 at\u00e2t colectarea de date bazat\u0103 pe agen\u021bi, c\u00e2t \u0219i primirea jurnalelor de sistem. Acest lucru o face eficient\u0103 pentru monitorizarea dispozitivelor care genereaz\u0103 jurnale, dar nu suport\u0103 instalarea unui agent \u2013 dispozitive de re\u021bea, imprimante \u0219i periferice.<\/p>\n<p>Wazuh suport\u0103 agen\u021bii OSSEC existen\u021bi \u0219i ofer\u0103 chiar \u0219i un ghid de migrare de la OSSEC la Wazuh. De\u0219i OSSEC este \u00eenc\u0103 activ sus\u021binut, Wazuh este considerat o continuare a OSSEC datorit\u0103 ad\u0103ug\u0103rii unei noi interfe\u021be web, REST API, unui set mai complet de reguli \u0219i multor alte \u00eembun\u0103t\u0103\u021biri.<\/p>\n<p><b>Avantajele<\/b><\/p>\n<ul>\n<li>Fondat \u0219i compatibil cu popularul SIEM OSSEC;<\/li>\n<li>Suport\u0103 diverse op\u021biuni de instalare: Docker, Puppet, Chef, Ansible;<\/li>\n<li>Suport\u0103 monitorizarea serviciilor cloud, inclusiv AWS \u0219i Azure;<\/li>\n<li>Include un set cuprinz\u0103tor de reguli pentru detectarea diverselor tipuri de atacuri \u0219i permite corelarea acestora conform PCI DSS v3.1 \u0219i CIS.<\/li>\n<li>Se integreaz\u0103 cu sistemul de stocare \u0219i analiz\u0103 a jurnaleor Splunk pentru vizualizarea evenimentelor \u0219i suport API.<\/li>\n<\/ul>\n<p><b>Dezavantaje<\/b><\/p>\n<ul>\n<li>Arhitectur\u0103 complex\u0103 - necesit\u0103 desf\u0103\u0219urarea complet\u0103 a Elastic Stack pe l\u00e2ng\u0103 componentele server Wazuh.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wazuh\/wazuh\"><b>Surs\u0103 <\/b><\/a><\/noindex><\/p>\n<h3>Prelude OSS<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme open-source de gestionare a evenimentelor de securitate\" src=\"\/wp-content\/uploads\/2019\/07\/ff195da95996aaf9d2e268b5e1851a79.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Prelude OSS este versiunea open-source a comercialei Prelude SIEM, dezvoltat\u0103 de compania francez\u0103 CS. Solu\u021bia reprezint\u0103 un sistem SIEM modulare \u0219i flexibil, care suport\u0103 multe formate de jurnale \u0219i integrarea cu instrumente externe precum OSSEC, Snort \u0219i sistemul de detec\u021bie a re\u021belei Suricata.<\/p>\n<p>Fiecare eveniment este normalizat \u00eentr-un mesaj conform formatului IDMEF, facilit\u00e2nd astfel schimbul de date cu alte sisteme. Dar exist\u0103 \u0219i un aspect negativ - Prelude OSS este foarte limitat \u00een performan\u021b\u0103 \u0219i func\u021bionalitate \u00een compara\u021bie cu versiunea comercial\u0103 Prelude SIEM, \u0219i este destinat mai mult proiectelor mici sau pentru \u00eenv\u0103\u021barea solu\u021biilor SIEM \u0219i evaluarea Prelude SIEM.<\/p>\n<p><b>Avantajele<\/b><\/p>\n<ul>\n<li>Un sistem dovedit \u00een timp, dezvoltat din 1998;<\/li>\n<li>Suport\u0103 multe formate diferite de jurnale;<\/li>\n<li>Normalizeaz\u0103 datele la formatul IMDEF, ceea ce permite transmiterea u\u0219oar\u0103 a datelor \u00een alte sisteme de securitate.<\/li>\n<\/ul>\n<p><b>Dezavantaje<\/b><\/p>\n<ul>\n<li>Limitat\u0103 semnificativ \u00een func\u021bionalitate \u0219i performan\u021b\u0103 \u00een compara\u021bie cu alte sisteme SIEM open-source.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Prelude-SIEM\/Prelude-SIEM\"><b>Surs\u0103 <\/b><\/a><\/noindex><\/p>\n<h3>Sagan<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme open-source de gestionare a evenimentelor de securitate\" src=\"\/wp-content\/uploads\/2019\/07\/f3c92d91e49721f2a648dcbae057a8d9.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Sagan este un SIEM de \u00eenalt\u0103 performan\u021b\u0103 care pune accent pe compatibilitatea cu Snort. Pe l\u00e2ng\u0103 suportul pentru regulile scrise pentru Snort, Sagan poate \u00eenregistra \u00een baza de date Snort \u0219i poate fi folosit chiar \u0219i cu interfa\u021ba Shuil. Practic, este o solu\u021bie u\u0219oar\u0103 \u0219i multi-threaded care ofer\u0103 func\u021bionalit\u0103\u021bi noi, r\u0103m\u00e2n\u00e2nd prietenoas\u0103 cu utilizatorii Snort.<\/p>\n<p><b>Avantajele<\/b><\/p>\n<ul>\n<li>Compatibil\u0103 \u00een totalitate cu baza de date Snort, regulile \u0219i interfa\u021ba utilizatorului;<\/li>\n<li>Arhitectura multi-threaded asigur\u0103 performan\u021be ridicate.<\/li>\n<\/ul>\n<p><b>Dezavantaje<\/b><\/p>\n<ul>\n<li>Un proiect relativ t\u00e2n\u0103r cu o comunitate mic\u0103;<\/li>\n<li>Un proces de instalare complex, care include compilarea \u00eentregului SIEM din surs\u0103.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/beave\/sagan\/\"><b>Surs\u0103<\/b><\/a><\/noindex><\/p>\n<h2>Concluzie<\/h2>\n<p>Fiecare dintre sistemele SIEM descrise are propriile sale caracteristici \u0219i limit\u0103ri, a\u0219a c\u0103 nu pot fi considerate solu\u021bii universale pentru orice organiza\u021bie. Totu\u0219i, aceste solu\u021bii au cod deschis, ceea ce permite desf\u0103\u0219urarea, testarea \u0219i evaluarea lor f\u0103r\u0103 cheltuieli excesive.<\/p>\n<p><b>Ce altceva interesant po\u021bi citi pe blog <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">Cloud4Y<\/a><\/noindex><\/b><\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/459156\/\">VNIITE al planetei \u00eentregi: cum \u00een URSS s-a dezvoltat sistemul \u201einteligent\u201d pentru cas\u0103<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/458330\/\">Cum interfe\u021bele neuronale ajut\u0103 umanitatea<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/454278\/\">Asigurarea cibernetic\u0103 pe pia\u021ba rus\u0103<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/454274\/\">Lumin\u0103, camer\u0103\u2026 cloud: cum norii schimb\u0103 industria cinematografic\u0103<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/453612\/\">Fotbal \u00een nori \u2014 mod\u0103 sau necesitate?<\/a><\/noindex><\/p>\n<p>Abona\u021bi-v\u0103 la canalul nostru <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/cloud4y\">Telegram<\/a><\/noindex>-canal pentru a nu rata urm\u0103torul articol! Scriem nu mai des de dou\u0103 ori pe s\u0103pt\u0103m\u00e2n\u0103 \u0219i doar lucruri importante.<\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/459442\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e? \u041d\u0435\u0442, \u043d\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430\u0437\u043e\u0432\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0418\u0433\u043e\u0440\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0432\u0447\u0435\u0440\u0430 \u043a\u043e\u043b\u043b\u0435\u0433\u0435 \u041c\u0430\u0440\u0438\u0438. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0441\u0442\u0430\u0440\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043e\u0442\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0432\u0441\u0435 \u0441\u0438\u043b\u044b, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27082,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36204","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-12-21T07:34:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd475 sisteme open-source pentru gestionarea evenimentelor de securitate | ProHoster","description":"Ce face un bun specialist \u00een securitate IT.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:16+00:00","article:modified_time":"2020-12-21T07:34:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36204","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:27","updated":"2026-01-22 02:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=36204"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36204\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/27082"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=36204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=36204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=36204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}