{"id":36204,"date":"2019-10-31T22:10:16","date_gmt":"2019-10-31T19:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\/"},"modified":"2020-12-21T09:34:37","modified_gmt":"2020-12-21T07:34:37","slug":"5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","title":{"rendered":"5 open-source sustava za upravljanje sigurnosnim doga\u0111anjima","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"5 open-source sustava za upravljanje sigurnosnim doga\u0111anjima\" src=\"\/wp-content\/uploads\/2019\/07\/aa62f0bea220d09adad31d5ee9eaa3af.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p><i>\u010c\u00edm se dobr\u00fd bezpe\u010dnostn\u00ed odborn\u00edk v IT oblasti li\u0161\u00ed od b\u011b\u017en\u00e9ho? Ne, nen\u00ed to t\u00edm, \u017ee by z pam\u011bti vyjmenoval po\u010det zpr\u00e1v, kter\u00e9 mana\u017eer Igor v\u010dera poslal kolegyni Marii. Dobr\u00fd bezpe\u010dnostn\u00ed odborn\u00edk se sna\u017e\u00ed identifikovat mo\u017en\u00e9 poru\u0161en\u00ed p\u0159edem a chytat je v re\u00e1ln\u00e9m \u010dase, p\u0159i\u010dem\u017e vynakl\u00e1d\u00e1 ve\u0161ker\u00e9 \u00fasil\u00ed, aby nedo\u0161lo k pokra\u010dov\u00e1n\u00ed incidentu. Syst\u00e9my pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed (SIEM, z anglick\u00e9ho Security Information and Event Management) v\u00fdrazn\u011b usnad\u0148uj\u00ed \u00fakol rychl\u00e9 identifikace a zablokov\u00e1n\u00ed jak\u00fdchkoli pokus\u016f o poru\u0161en\u00ed.<\/i><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTraditionally, SIEM systems combine security information management and security event management. An important feature of the systems is real-time security event analysis, which allows for responses before any existing damage occurs.<\/p>\n<p><b>Hlavn\u00ed \u00fakoly SIEM syst\u00e9m\u016f:<\/b><\/p>\n<ul>\n<li>Sb\u011br a normalizace dat<\/li>\n<li>Korelace dat<\/li>\n<li>Upozorn\u011bn\u00ed<\/li>\n<li>Vizualiza\u010dn\u00ed panely<\/li>\n<li>Organizace ukl\u00e1d\u00e1n\u00ed dat<\/li>\n<li>Vyhled\u00e1v\u00e1n\u00ed a anal\u00fdza dat<\/li>\n<li>Poro\u010danje<\/li>\n<\/ul>\n<h2>D\u016fvody vysok\u00e9 popt\u00e1vky po SIEM syst\u00e9mech<\/h2>\n<p>V posledn\u00ed dob\u011b se v\u00fdrazn\u011b zv\u00fd\u0161ila slo\u017eitost a koordinace \u00fatok\u016f na informa\u010dn\u00ed syst\u00e9my. Spolu s t\u00edm se komplikuje i pou\u017eit\u00fd soubor prost\u0159edk\u016f na ochranu informac\u00ed\u2014 s\u00ed\u0165ov\u00e9 a hostitelsk\u00e9 syst\u00e9my detekce naru\u0161en\u00ed, DLP syst\u00e9my, antivirov\u00e9 syst\u00e9my a firewally, skenery zranitelnost\u00ed a dal\u0161\u00ed. Ka\u017ed\u00fd ochrann\u00fd prost\u0159edek generuje tok ud\u00e1lost\u00ed s r\u016fznou detailnost\u00ed a \u010dasto lze \u00fatok odhalit pouze na z\u00e1klad\u011b p\u0159ekryt\u00ed ud\u00e1lost\u00ed z r\u016fzn\u00fdch syst\u00e9m\u016f.<\/p>\n<p>O r\u016fzn\u00fdch komer\u010dn\u00edch SIEM syst\u00e9mech bylo naps\u00e1no mnoho. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/muk\/blog\/325330\/\">Nab\u00edz\u00edme v\u0161ak stru\u010dn\u00fd p\u0159ehled bezplatn\u00fdch plnohodnotn\u00fdch open-source SIEM syst\u00e9m\u016f, kter\u00e9 nemaj\u00ed um\u011bl\u00e1 omezen\u00ed na po\u010det u\u017eivatel\u016f nebo objemy p\u0159ij\u00edman\u00fdch \u010di ukl\u00e1dan\u00fdch dat, a tak\u00e9 snadno \u0161k\u00e1luj\u00ed a jsou udr\u017eov\u00e1ny. Douf\u00e1me, \u017ee to pom\u016f\u017ee zhodnotit potenci\u00e1l podobn\u00fdch syst\u00e9m\u016f a rozhodnout se, zda za\u010dlenit tyto \u0159e\u0161en\u00ed do podnikov\u00fdch proces\u016f spole\u010dnosti.<\/a><\/noindex>AlienVault OSSIM<\/p>\n<h3>AlienVault OSSIM<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source sustava za upravljanje sigurnosnim doga\u0111anjima\" src=\"\/wp-content\/uploads\/2019\/07\/f74856a0ce3eeb7ecccc16db6ae5e076.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>AlienVault OSSIM je open-source razli\u010dica AlienVault USM, enega vodilnih komercialnih SIEM sistemov. OSSIM predstavlja okvir, sestavljen iz ve\u010d projektov z odprtokodnim izvorom, vklju\u010dno z omre\u017enim sistemom za odkrivanje vdorov Snort, sistemom za spremljanje omre\u017eij in gostiteljev Nagios, gostiteljskim sistemom za odkrivanje vdorov OSSEC in skenerjem ranljivosti OpenVAS.<\/p>\n<p>Za spremljanje naprav se uporablja AlienVault Agent, ki po\u0161ilja dnevnike z gostitelja v formatu syslog na platformo GELF ali pa se lahko uporablja vti\u010dnik za integracijo z zunanjimi storitvami, kot sta storitev obratnega proxy vmesnika Cloudflare ali sistem ve\u010dfaktorske avtentikacije Okta.<\/p>\n<p>Razli\u010dica USM se razlikuje od OSSIM po raz\u0161irjenih funkcionalnostih za upravljanje dnevnikov, spremljanje obla\u010dne infrastrukture, avtomatizacijo ter a\u017eurne informacije o gro\u017enjah in vizualizacijo.<\/p>\n<p><b>Prednosti<\/b><\/p>\n<ul>\n<li>Zgrajena na preverjenih odprtokodnih projektih;<\/li>\n<li>Obse\u017ena skupnost uporabnikov in razvijalcev.<\/li>\n<\/ul>\n<p><b>Slabosti<\/b><\/p>\n<ul>\n<li>Ne podpira spremljanja obla\u010dnih platform (na primer, AWS ali Azure);<\/li>\n<li>Pomanjkanje upravljanja z logi, vizualizacije, avtomatizacije in integracije z zunanjimi storitvami.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossimlabs\/ossim\"><b>Vir<\/b><\/a><\/noindex><\/p>\n<h3>MozDef (Mozilla Defense Platform)<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source sustava za upravljanje sigurnosnim doga\u0111anjima\" src=\"\/wp-content\/uploads\/2019\/07\/028c667490a6b0de1f0dd6b6cc283f93.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>SIEM sistem MozDef, ki ga je razvila Mozilla, se uporablja za avtomatizacijo procesov obravnave varnostnih incidentov. Sistem je bil razvit od temeljev za dosego maksimalne hitrosti, raz\u0161irljivosti in odpornosti, z mikroservisno arhitekturo \u2013 vsaka storitev deluje v Docker kontejnerju.<\/p>\n<p>Podobno kot OSSIM, je MozDef zgrajena na preverjenih odprtokodnih projektih, ki vklju\u010dujejo modul za indeksiranje logov in iskanje Elasticsearch, platformo Meteor za razvoj fleksibilnega spletnega vmesnika ter vti\u010dnik Kibana za vizualizacijo in ustvarjanje grafikonov.<\/p>\n<p>Korelacija dogodkov in obve\u0161\u010danje poteka z uporabo poizvedbe Elasticsearch, kar omogo\u010da pisanje lastnih pravil za obdelavo dogodkov in obve\u0161\u010danje z uporabo Pythona. Po besedah Mozille MozDef lahko obdeluje ve\u010d kot 300 milijonov dogodkov na dan. MozDef sprejema dogodke samo v formatu JSON, vendar obstaja integracija z zunanjimi storitvami.<\/p>\n<p><b>Prednosti<\/b><\/p>\n<ul>\n<li>Ne uporablja agentov \u2013 deluje s standardnimi logi JSON;<\/li>\n<li>Enostavno se raz\u0161iri zahvaljujo\u010d mikroservisni arhitekturi;<\/li>\n<li>Podpira vire podatkov obla\u010dnih storitev, vklju\u010dno z AWS CloudTrail in GuardDuty.<\/li>\n<\/ul>\n<p><b>Slabosti<\/b><\/p>\n<ul>\n<li>Nov in manj uveljavljen sistem.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/MozDef\"><b>Vir<\/b><\/a><\/noindex><\/p>\n<h3>Wazuh<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source sustava za upravljanje sigurnosnim doga\u0111anjima\" src=\"\/wp-content\/uploads\/2019\/07\/b03ade4628c4cca1dd732a1e3a1f320f.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Wazuh se je za\u010del razvijati kot fork OSSEC, enega najbolj priljubljenih SIEM-ov z odprto kodo. Sedaj pa je to edinstvena re\u0161itev z novimi funkcionalnostmi, popravljenimi napakami in optimizirano arhitekturo.<\/p>\n<p>Sistem je zgrajen na ElasticStacku (Elasticsearch, Logstash, Kibana) in podpira tako zbiranje podatkov na osnovi agentov kot tudi sprejem sistemskih dnevnikov. To ga dela u\u010dinkovitega pri spremljanju naprav, ki generirajo dnevnike, vendar ne podpirajo namestitve agenta \u2013 mre\u017ene naprave, tiskalnike in periferijo.<\/p>\n<p>Wazuh podpira obstoje\u010de agente OSSEC in celo nudi vodnik za migracijo z OSSEC na Wazuh. \u010ceprav je OSSEC \u0161e vedno aktivno podprt, se Wazuh obravnava kot nadaljevanje OSSEC zaradi dodanega novega spletnega vmesnika, REST API, obse\u017enej\u0161ega sklopa pravil in mnogih drugih izbolj\u0161av.<\/p>\n<p><b>Prednosti<\/b><\/p>\n<ul>\n<li>Ustanovljen in zdru\u017eljiv s priljubljenim SIEM-om OSSEC;<\/li>\n<li>Podpira razli\u010dne mo\u017enosti namestitve: Docker, Puppet, Chef, Ansible;<\/li>\n<li>Podpira spremljanje obla\u010dnih storitev, vklju\u010dno z AWS in Azure;<\/li>\n<li>Vklju\u010duje obse\u017een sklop pravil za odkrivanje razli\u010dnih tipov napadov ter omogo\u010da njihovo usklajevanje s PCI DSS v3.1 in CIS.<\/li>\n<li>Integrira se s sistemom za shranjevanje in analizo dnevnikov Splunk za vizualizacijo dogodkov in podporo API.<\/li>\n<\/ul>\n<p><b>Slabosti<\/b><\/p>\n<ul>\n<li>Zahtevna arhitektura \u2014 zahteva popolno namestitev Elastic Stack poleg stre\u017eni\u0161kih komponent Wazuh.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wazuh\/wazuh\"><b>Vir <\/b><\/a><\/noindex><\/p>\n<h3>Prelude OSS<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source sustava za upravljanje sigurnosnim doga\u0111anjima\" src=\"\/wp-content\/uploads\/2019\/07\/ff195da95996aaf9d2e268b5e1851a79.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Prelude OSS je open-source razli\u010dica komercialne Prelude SIEM, ki jo je razvilo francosko podjetje CS. Re\u0161itev predstavlja prilagodljiv modularni SIEM sistem, ki podpira \u0161tevilne formate dnevnikov in integracijo s tretjimi orodji, kot so OSSEC, Snort in omre\u017eni sistem odkrivanja Suricata.<\/p>\n<p>Vsak dogodek se normalizira v sporo\u010dilo po formatu IDMEF, kar poenostavi izmenjavo podatkov z drugimi sistemi. A obstaja tudi \u017elica katrana \u2014 Prelude OSS je mo\u010dno omejen glede zmogljivosti in funkcionalnosti v primerjavi s komercialno razli\u010dico Prelude SIEM, in je namenjen bolj manj\u0161im projektom ali za raziskovanje re\u0161itev SIEM in ocenjevanje Prelude SIEM.<\/p>\n<p><b>Prednosti<\/b><\/p>\n<ul>\n<li>Preizku\u0161ena sistem, ki se razvija od leta 1998;<\/li>\n<li>Podpira \u0161tevilne razli\u010dne formate dnevnikov;<\/li>\n<li>Normalizira podatke v format IMDEF, kar omogo\u010da enostavno prena\u0161anje podatkov v druge varnostne sisteme.<\/li>\n<\/ul>\n<p><b>Slabosti<\/b><\/p>\n<ul>\n<li>Znatno omejeno glede funkcionalnosti in zmogljivosti v primerjavi z drugimi open-source SIEM sistemi.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Prelude-SIEM\/Prelude-SIEM\"><b>Vir <\/b><\/a><\/noindex><\/p>\n<h3>Sagan<\/h3>\n<p><img decoding=\"async\" alt=\"5 open-source sustava za upravljanje sigurnosnim doga\u0111anjima\" src=\"\/wp-content\/uploads\/2019\/07\/f3c92d91e49721f2a648dcbae057a8d9.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Sagan je visoko zmogljiv SIEM, ki poudarja zdru\u017eljivost s Snortom. Poleg podpore pravilom, zapisanim za Snort, Sagan lahko izvaja zapisovanje v bazo podatkov Snort in se celo lahko uporablja z vmesnikom Shuil. V bistvu gre za lahkotno ve\u010dnitno re\u0161itev, ki ponuja nove funkcije, ob tem pa ostaja prijazna do uporabnikov Snorta.<\/p>\n<p><b>Prednosti<\/b><\/p>\n<ul>\n<li>Popolnoma zdru\u017eljivo z bazo podatkov Snort, pravili in uporabni\u0161kim vmesnikom;<\/li>\n<li>Ve\u010dnitna arhitektura zagotavlja visoko zmogljivost.<\/li>\n<\/ul>\n<p><b>Slabosti<\/b><\/p>\n<ul>\n<li>Relativno mlad projekt z majhno skupnostjo;<\/li>\n<li>Zahteven postopek namestitve, ki vklju\u010duje sestavljanje celotnega SIEM iz izvorne kode.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/beave\/sagan\/\"><b>Vir<\/b><\/a><\/noindex><\/p>\n<h2>Zaklju\u010dek<\/h2>\n<p>Vsak od opisanih SIEM sistemov ima svoje posebnosti in omejitve, zato jih ni mogo\u010de \u0161teti za univerzalno re\u0161itev za vsako organizacijo. Vendar pa imajo te re\u0161itve odprto kodo, kar omogo\u010da njihovo uvajanje, testiranje in ocenjevanje brez pretiranih stro\u0161kov.<\/p>\n<p><b>Kaj drugega zanimivega lahko preberete v blogu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">Cloud4Y<\/a><\/noindex><\/b><\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/459156\/\">VNIITE planetov vsega: kako je v ZSSR nastal sistem 'pametne hi\u0161e'<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/458330\/\">Kako nevrointerfisi pomagajo \u010dlove\u0161tvu<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/454278\/\">Kiberzavarovanje na ruskem trgu<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/454274\/\">Svetloba, kamera... oblak: kako oblaki spreminjajo filmsko industrijo<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/453612\/\">Nogomet v oblakih \u2014 moda ali nujnost?<\/a><\/noindex><\/p>\n<p>Prijavite se na na\u0161 <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/cloud4y\">Telegram<\/a><\/noindex>-kanal, da ne zamudite novega \u010dlanka! Pi\u0161emo najve\u010d dvakrat na teden in samo o pomembnih stvareh.<\/p>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/459442\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e? \u041d\u0435\u0442, \u043d\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430\u0437\u043e\u0432\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0418\u0433\u043e\u0440\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0432\u0447\u0435\u0440\u0430 \u043a\u043e\u043b\u043b\u0435\u0433\u0435 \u041c\u0430\u0440\u0438\u0438. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0441\u0442\u0430\u0440\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043e\u0442\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0432\u0441\u0435 \u0441\u0438\u043b\u044b, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27082,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36204","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-12-21T07:34:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd475 open-source sistemov za upravljanje varnostnih dogodkov | ProHoster","description":"Kaj dela dobrega informatikarja na podro\u010dju IT.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:16+00:00","article:modified_time":"2020-12-21T07:34:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36204","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:27","updated":"2026-01-22 02:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/36204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=36204"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/36204\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/27082"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=36204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=36204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=36204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}