{"id":36204,"date":"2019-10-31T22:10:16","date_gmt":"2019-10-31T19:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\/"},"modified":"2020-12-21T09:34:37","modified_gmt":"2020-12-21T07:34:37","slug":"5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","title":{"rendered":"5 sisteme t\u00eb menaxhimit t\u00eb ngjarjeve t\u00eb siguris\u00eb n\u00eb burim t\u00eb hapur","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"5 sisteme t\u00eb menaxhimit t\u00eb ngjarjeve t\u00eb siguris\u00eb n\u00eb burim t\u00eb hapur\" src=\"\/wp-content\/uploads\/2019\/07\/aa62f0bea220d09adad31d5ee9eaa3af.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p><i>\u00c7far\u00eb e ndan nj\u00eb specialist t\u00eb siguris\u00eb n\u00eb fush\u00ebn e IT-s\u00eb nga nj\u00eb t\u00eb zakonsh\u00ebm? Jo, jo me at\u00eb q\u00eb ai e di nga memoria n\u00eb \u00e7do moment se sa mesazhe menaxheri Igor i d\u00ebrgoi koleges Maria dje. Nj\u00eb specialist i mir\u00eb i siguris\u00eb p\u00ebrpiqet t\u00eb identifikoj\u00eb shkeljet e mundshme paraprakisht dhe t'i kap\u00eb ato n\u00eb koh\u00eb reale, duke b\u00ebr\u00eb gjith\u00e7ka q\u00eb \u00ebsht\u00eb e mundur p\u00ebr t\u00eb parandaluar vazhdimin e incidentit. Sistemet e menaxhimit t\u00eb ngjarjeve t\u00eb siguris\u00eb (SIEM, nga Security Information and Event Management) e leht\u00ebsojn\u00eb ndjesh\u00ebm detyr\u00ebn e efektivitetit t\u00eb shpejt\u00eb dhe bllokimit t\u00eb \u00e7do p\u00ebrpjekjeje p\u00ebr shkelje.<\/i><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTradicionalisht, sistemet SIEM kombinojn\u00eb nj\u00eb sistem t\u00eb menaxhimit t\u00eb siguris\u00eb s\u00eb informacionit me nj\u00eb sistem t\u00eb menaxhimit t\u00eb ngjarjeve t\u00eb siguris\u00eb. Nj\u00eb ve\u00e7ori e r\u00ebnd\u00ebsishme e k\u00ebtyre sistemeve \u00ebsht\u00eb analiza e ngjarjeve t\u00eb siguris\u00eb n\u00eb koh\u00eb reale, e cila lejon reagimin ndaj tyre para se t\u00eb ndodhi ndonj\u00eb d\u00ebm aktual.<\/p>\n<p><b>Detyrat kryesore t\u00eb sistemeve SIEM:<\/b><\/p>\n<ul>\n<li>Grumbullimi dhe normalizimi i t\u00eb dh\u00ebnave<\/li>\n<li>Korrelarja e t\u00eb dh\u00ebnave<\/li>\n<li>Njoftimi<\/li>\n<li>Panelet vizualizuese<\/li>\n<li>Organizimi i ruajtjes s\u00eb t\u00eb dh\u00ebnave<\/li>\n<li>K\u00ebrkimi dhe analiza e t\u00eb dh\u00ebnave<\/li>\n<li>Raportimi<\/li>\n<\/ul>\n<h2>Arsyet e k\u00ebrkes\u00ebs s\u00eb lart\u00eb p\u00ebr sistemet SIEM<\/h2>\n<p>Gjat\u00eb koh\u00ebve t\u00eb fundit, ka rritur ndjesh\u00ebm kompleksitetin dhe koordinimin e sulmeve ndaj sistemeve t\u00eb informacionit. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, nd\u00ebrlikohet edhe kompleksiteti i mjet\u00ebve t\u00eb p\u00ebrdorur p\u00ebr mbrojtjen e informacionit\u2014 sistemet e mbrojtjes s\u00eb rrjetit dhe hosteve t\u00eb identifikimit t\u00eb ankesave, sistemet DLP, sistemet antivirus dhe firewalls, skaner\u00ebt e dob\u00ebsive etj. \u00c7do mjet mbrojt\u00ebs gjeneron nj\u00eb fluks ngjarjesh me detaje t\u00eb ndryshme dhe shpesh sulmi mund t\u00eb shikohet vet\u00ebm p\u00ebrmes mbivendosjes s\u00eb ngjarjeve nga sisteme t\u00eb ndryshme.<\/p>\n<p>P\u00ebr t\u00eb gjitha llojet e sistemeve SIEM komerciale ka shum\u00eb informacione, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/muk\/blog\/325330\/\">\u00ebsht\u00eb shkruar<\/a><\/noindex>, por ne ofrojm\u00eb nj\u00eb p\u00ebrmbledhje t\u00eb shkurt\u00ebr t\u00eb sistemeve SIEM me burim t\u00eb hapur, plot\u00ebsisht funksionale, q\u00eb nuk kan\u00eb kufizime artificiale n\u00eb numrin e p\u00ebrdoruesve ose n\u00eb volumin e t\u00eb dh\u00ebnave t\u00eb pranuara dhe t\u00eb ruajtur, si dhe q\u00eb leht\u00eb shkall\u00ebzojn\u00eb dhe mb\u00ebshteten. Shpresojm\u00eb, kjo do t'ju ndihmoj\u00eb t\u00eb vler\u00ebsoni potencialin e sistemeve t\u00eb tilla dhe t\u00eb merrni nj\u00eb vendim n\u00ebse ia vlen t\u00eb integroni k\u00ebto zgjidhje n\u00eb proceset e biznesit t\u00eb kompanis\u00eb.<\/p>\n<h3>AlienVault OSSIM<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme t\u00eb menaxhimit t\u00eb ngjarjeve t\u00eb siguris\u00eb n\u00eb burim t\u00eb hapur\" src=\"\/wp-content\/uploads\/2019\/07\/f74856a0ce3eeb7ecccc16db6ae5e076.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>AlienVault OSSIM \u00ebsht\u00eb versioni open-source i AlienVault USM, nj\u00ebra nga sistemet SIEM komerciale m\u00eb t\u00eb njohura. OSSIM \u00ebsht\u00eb nj\u00eb korniz\u00eb q\u00eb p\u00ebrb\u00ebhet nga disa projekte me kod t\u00eb hapur, duke p\u00ebrfshir\u00eb sistemin e zbules\u00ebs s\u00eb sulmeve n\u00eb rrjet Snort, sistemin e monitorimit t\u00eb rrjetit dhe nodeve Nagios, sistemin e zbules\u00ebs s\u00eb sulmeve n\u00eb host OSSEC dhe skanerin e dob\u00ebsive OpenVAS.<\/p>\n<p>P\u00ebr monitorimin e pajisjeve p\u00ebrdoret AlienVault Agent, i cili d\u00ebrgon regjistrat nga hosti n\u00eb formatin syslog n\u00eb \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u00ebn GELF ose mund t\u00eb p\u00ebrdoret nj\u00eb plugin p\u00ebr integrimin me sh\u00ebrbime t\u00eb jashtme, si sh\u00ebrbimi i reverse proxy p\u00ebr faqet Cloudflare ose sistemi i autentifikimit t\u00eb shum\u00eb faktor\u00ebve Okta.<\/p>\n<p>Versioni USM dallohet nga OSSIM p\u00ebr funksionalitetin e zgjeruar p\u00ebr menaxhimin e regjistrave, monitorimin e infrastruktur\u00ebs n\u00eb re, automatizimin, dhe informacionin e p\u00ebrdit\u00ebsuar mbi k\u00ebrc\u00ebnimet dhe vizualizimin.<\/p>\n<p><b>P\u00ebrfitimet<\/b><\/p>\n<ul>\n<li>E nd\u00ebrtuar mbi projekte open-source t\u00eb provuara;<\/li>\n<li>Nj\u00eb komunitet i madh p\u00ebrdoruesish dhe zhvilluesish.<\/li>\n<\/ul>\n<p><b>Mang\u00ebsit\u00eb<\/b><\/p>\n<ul>\n<li>Nuk mb\u00ebshtet monitorimin e platformave n\u00eb re (p.sh., AWS ose Azure);<\/li>\n<li>Nuk ka menaxhim regjistrash, vizualizim, automatizim dhe integrim me sh\u00ebrbime t\u00eb jashtme.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossimlabs\/ossim\"><b>Burimi<\/b><\/a><\/noindex><\/p>\n<h3>MozDef (Mozilla Defense Platform)<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme t\u00eb menaxhimit t\u00eb ngjarjeve t\u00eb siguris\u00eb n\u00eb burim t\u00eb hapur\" src=\"\/wp-content\/uploads\/2019\/07\/028c667490a6b0de1f0dd6b6cc283f93.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Sistemi SIEM i zhvilluar nga Mozilla, MozDef, p\u00ebrdoret p\u00ebr automatizimin e proceseve t\u00eb trajtimit t\u00eb incidenteve t\u00eb siguris\u00eb. Sistemi \u00ebsht\u00eb zhvilluar nga fillimi p\u00ebr t\u00eb arritur performanc\u00eb maksimale, shkall\u00ebzueshm\u00ebri dhe q\u00ebndrueshm\u00ebri, me nj\u00eb arkitektur\u00eb mikrosherbimesh \u2013 \u00e7do sh\u00ebrbim punon n\u00eb nj\u00eb container Docker.<\/p>\n<p>Ashtu si OSSIM, MozDef \u00ebsht\u00eb nd\u00ebrtuar mbi projekte open-source t\u00eb provuara me kalimin e koh\u00ebs, duke p\u00ebrfshir\u00eb modulin p\u00ebr indeksimin e regjistrave dhe k\u00ebrkimin Elasticsearch, platform\u00ebn Meteor p\u00ebr nd\u00ebrtimin e nj\u00eb nd\u00ebrfaqe web fleksibile, dhe pluginin Kibana p\u00ebr vizualizimin dhe krijimin e grafik\u00ebve.<\/p>\n<p>Korrellimi i ngjarjeve dhe njoftimi kryhen duke p\u00ebrdorur pyetje Elasticsearch, q\u00eb lejon shkruarjen e rregullave t\u00eb vet\u00ebdijshme p\u00ebr trajtimin e ngjarjeve dhe njoftimeve duke p\u00ebrdorur Python. Sipas Mozilla, MozDef mund t\u00eb p\u00ebrballoj\u00eb m\u00eb shum\u00eb se 300 milion ngjarje n\u00eb dit\u00eb. MozDef pranon ngjarje vet\u00ebm n\u00eb formatin JSON, por ka integrim me sh\u00ebrbime t\u00eb jashtme.<\/p>\n<p><b>P\u00ebrfitimet<\/b><\/p>\n<ul>\n<li>Nuk p\u00ebrdor agjent\u00eb \u2013 funksionon me regjistrat standard JSON;<\/li>\n<li>Leht\u00eb \u00ebsht\u00eb e shkall\u00ebzueshme fal\u00eb arkitektur\u00ebs mikrosherbimesh;<\/li>\n<li>Mb\u00ebshtet burime t\u00eb dh\u00ebnash nga sh\u00ebrbimet n\u00eb re, duke p\u00ebrfshir\u00eb AWS CloudTrail dhe GuardDuty.<\/li>\n<\/ul>\n<p><b>Mang\u00ebsit\u00eb<\/b><\/p>\n<ul>\n<li>Nj\u00eb sistem i ri dhe m\u00eb pak i stabilizuar.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/MozDef\"><b>Burimi<\/b><\/a><\/noindex><\/p>\n<h3>Wazuh<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme t\u00eb menaxhimit t\u00eb ngjarjeve t\u00eb siguris\u00eb n\u00eb burim t\u00eb hapur\" src=\"\/wp-content\/uploads\/2019\/07\/b03ade4628c4cca1dd732a1e3a1f320f.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Wazuh ka filluar si nj\u00eb fork i OSSEC, nj\u00eb nga SIEM-t\u00eb m\u00eb t\u00eb njohura me kod t\u00eb hapur. Tani \u00ebsht\u00eb nj\u00eb zgjidhje unike me funksionalitete t\u00eb reja, me gabime t\u00eb rregulluara dhe nj\u00eb arkitektur\u00eb t\u00eb optimizuar.<\/p>\n<p>Sistemi \u00ebsht\u00eb nd\u00ebrtuar mbi stek\u00ebn ElasticStack (Elasticsearch, Logstash, Kibana) dhe mb\u00ebshtet si mbledhjen e t\u00eb dh\u00ebnave mbi baza agjent\u00ebsh, ashtu edhe pranimin e logjeve t\u00eb sistemeve. Kjo e b\u00ebn at\u00eb efikase p\u00ebr monitorimin e pajisjeve q\u00eb gjenerojn\u00eb logje, por nuk mb\u00ebshtesin instalimin e agjentit \u2013 pajisje rrjeti, printera dhe periferik\u00eb.<\/p>\n<p>Wazuh mb\u00ebshtet agjent\u00ebt ekzistues t\u00eb OSSEC dhe madje ofron nj\u00eb udh\u00ebzues p\u00ebr migrimin nga OSSEC n\u00eb Wazuh. Edhe pse OSSEC ende mb\u00ebshtetet aktivisht, Wazuh konsiderohet si vazhdim i OSSEC p\u00ebr shkak t\u00eb shtimit t\u00eb nj\u00eb nd\u00ebrfaqeje t\u00eb re web, REST API, nj\u00eb set m\u00eb t\u00eb plot\u00eb t\u00eb rregullave dhe shum\u00eb p\u00ebrmir\u00ebsive t\u00eb tjera.<\/p>\n<p><b>P\u00ebrfitimet<\/b><\/p>\n<ul>\n<li>E themeluar dhe kompatibile me SIEM-n\u00eb e njohur OSSEC;<\/li>\n<li>Mb\u00ebshtetOpsionet e ndryshme t\u00eb instalimit: Docker, Puppet, Chef, Ansible;<\/li>\n<li>Mb\u00ebshtet monitorimin e sh\u00ebrbimeve cloud, duke p\u00ebrfshir\u00eb AWS dhe Azure;<\/li>\n<li>P\u00ebrfshin nj\u00eb set kompleks rregullash p\u00ebr identifikimin e shum\u00eb llojeve t\u00eb sulmeve dhe lejon p\u00ebrputhjen e tyre me PCI DSS v3.1 dhe CIS.<\/li>\n<li>Integrohet me sistemin e ruajtjes dhe analiz\u00ebs s\u00eb logeve Splunk p\u00ebr vizualizimin e ngjarjeve dhe mb\u00ebshtetje API.<\/li>\n<\/ul>\n<p><b>Mang\u00ebsit\u00eb<\/b><\/p>\n<ul>\n<li>Arkitektur\u00eb komplekse \u2014 k\u00ebrkon nj\u00eb shp\u00ebrndarje t\u00eb plot\u00eb t\u00eb Elastic Stack p\u00ebrve\u00e7 komponenteve server Wazuh.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/wazuh\/wazuh\"><b>Burimi <\/b><\/a><\/noindex><\/p>\n<h3>Prelude OSS<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme t\u00eb menaxhimit t\u00eb ngjarjeve t\u00eb siguris\u00eb n\u00eb burim t\u00eb hapur\" src=\"\/wp-content\/uploads\/2019\/07\/ff195da95996aaf9d2e268b5e1851a79.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Prelude OSS \u00ebsht\u00eb versioni me kod t\u00eb hapur i Prelude SIEM komerciale, i zhvilluar nga kompanis\u00eb franceze CS. Ky zgjidhje p\u00ebrfaq\u00ebson nj\u00eb sistem fleksib\u00ebl modulues SIEM q\u00eb mb\u00ebshtet shum\u00eb formate logu dhe integrimin me mjete t\u00eb tjera si OSSEC, Snort dhe sistemin e zbulimit rrjet Suricata.<\/p>\n<p>\u00c7do ngjarje normalizohet n\u00eb nj\u00eb mesazh sipas formatit IDMEF, \u00e7ka leht\u00ebson shk\u00ebmbimin e t\u00eb dh\u00ebnave me sisteme t\u00eb tjera. Megjithat\u00eb, ka nj\u00eb an\u00eb negative \u2014 Prelude OSS \u00ebsht\u00eb shum\u00eb e kufizuar n\u00eb rendiment dhe funksionalitet n\u00eb krahasim me versionin komercial t\u00eb Prelude SIEM, dhe \u00ebsht\u00eb m\u00eb shum\u00eb e destinuar p\u00ebr projekte t\u00eb vogla ose p\u00ebr studimin e zgjidhjeve SIEM dhe vler\u00ebsimin e Prelude SIEM.<\/p>\n<p><b>P\u00ebrfitimet<\/b><\/p>\n<ul>\n<li>Nj\u00eb sistem i provuar n\u00eb koh\u00eb, i zhvilluar q\u00eb nga viti 1998;<\/li>\n<li>Mb\u00ebshtet shum\u00eb formate t\u00eb ndryshme logu;<\/li>\n<li>Normalizon t\u00eb dh\u00ebnat n\u00eb formatin IMDEF, \u00e7ka leht\u00ebson transferimin e t\u00eb dh\u00ebnave n\u00eb sisteme t\u00eb tjera sigurie.<\/li>\n<\/ul>\n<p><b>Mang\u00ebsit\u00eb<\/b><\/p>\n<ul>\n<li>Krahasuar ndjesh\u00ebm n\u00eb funksionalitet dhe performanc\u00eb n\u00eb krahasim me SIEM-t\u00eb tjera me burim t\u00eb hapur.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Prelude-SIEM\/Prelude-SIEM\"><b>Burimi <\/b><\/a><\/noindex><\/p>\n<h3>Sagan<\/h3>\n<p><img decoding=\"async\" alt=\"5 sisteme t\u00eb menaxhimit t\u00eb ngjarjeve t\u00eb siguris\u00eb n\u00eb burim t\u00eb hapur\" src=\"\/wp-content\/uploads\/2019\/07\/f3c92d91e49721f2a648dcbae057a8d9.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Sagan \u00ebsht\u00eb nj\u00eb SIEM me performanc\u00eb t\u00eb lart\u00eb q\u00eb thekson kompatibilitetin me Snort. P\u00ebrve\u00e7 mb\u00ebshtetjes p\u00ebr rregullat e shkruara p\u00ebr Snort, Sagan mund t\u00eb b\u00ebj\u00eb regjistrimin n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb Snort dhe madje mund t\u00eb p\u00ebrdoret me nd\u00ebrfaqen Shuil. N\u00eb thelb, kjo \u00ebsht\u00eb nj\u00eb zgjidhje e leht\u00eb shum\u00ebp\u00ebrmasore q\u00eb ofron funksione t\u00eb reja, duke mbetur miq\u00ebsore me p\u00ebrdoruesit e Snort.<\/p>\n<p><b>P\u00ebrfitimet<\/b><\/p>\n<ul>\n<li>Plot\u00ebsisht e compatib\u00ebl me baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb Snort, rregullat dhe nd\u00ebrfaqen p\u00ebrdoruese;<\/li>\n<li>Arkitektura shum\u00ebp\u00ebrmasore ofron performanc\u00eb t\u00eb lart\u00eb.<\/li>\n<\/ul>\n<p><b>Mang\u00ebsit\u00eb<\/b><\/p>\n<ul>\n<li>Nj\u00eb projekt relativisht i ri me nj\u00eb komunitet t\u00eb vog\u00ebl;<\/li>\n<li>Nj\u00eb proces instalimi i komplikuar q\u00eb p\u00ebrfshin nd\u00ebrtimin e t\u00eb gjith\u00eb SIEM nga burimet.<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/beave\/sagan\/\"><b>Burimi<\/b><\/a><\/noindex><\/p>\n<h2>P\u00ebrfundim<\/h2>\n<p>\u00c7do nj\u00eb nga sistemet e p\u00ebrmendura SIEM ka karakteristikat dhe kufizimet e veta, prandaj nuk mund t\u00eb quhen zgjidhje universale p\u00ebr \u00e7do organizat\u00eb. Megjithat\u00eb, k\u00ebto zgjidhje kan\u00eb kod t\u00eb hapur, \u00e7ka lejon vendosjen, testimin dhe vler\u00ebsimin e tyre pa shpenzime t\u00eb tepruara.<\/p>\n<p><b>\u00c7far\u00eb tjet\u00ebr interesante mund t\u00eb lexoni n\u00eb blog <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">Cloud4Y<\/a><\/noindex><\/b><\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/459156\/\">VNIITE e gjith\u00eb bot\u00ebs: si u shpik sistemi i \"sht\u00ebpis\u00eb inteligjente\" n\u00eb BE si\u00e7 ishte n\u00eb BSh<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/458330\/\">Si ndihmojn\u00eb neurointerfisat n\u00eb njer\u00ebzimin<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/454278\/\">Sigurimi kibernetik n\u00eb tregun rus<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/454274\/\">Drita, kamera\u2026 re: si re jan\u00eb duke ndryshuar industrin\u00eb e filmit<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/453612\/\">Futbolli n\u00eb re \u2014 mod\u00eb apo nevoj\u00eb?<\/a><\/noindex><\/p>\n<p>Abonohuni n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/cloud4y\">Telegram<\/a><\/noindex>-kanali, p\u00ebr t\u00eb mos humbur artikullin tjet\u00ebr! Ne shkruajm\u00eb jo m\u00eb shpesh se dy her\u00eb n\u00eb jav\u00eb dhe vet\u00ebm p\u00ebr \u00e7\u00ebshtje t\u00eb r\u00ebnd\u00ebsishme.<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/459442\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e? \u041d\u0435\u0442, \u043d\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430\u0437\u043e\u0432\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0418\u0433\u043e\u0440\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0432\u0447\u0435\u0440\u0430 \u043a\u043e\u043b\u043b\u0435\u0433\u0435 \u041c\u0430\u0440\u0438\u0438. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0441\u0442\u0430\u0440\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043e\u0442\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u0432\u0441\u0435 \u0441\u0438\u043b\u044b, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27082,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36204","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-12-21T07:34:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd475 sisteme open-source p\u00ebr menaxhimin e ngjarjeve t\u00eb siguris\u00eb | ProHoster","description":"\u00c7far\u00eb e b\u00ebn nj\u00eb t\u00eb sigurt t\u00eb mir\u00eb n\u00eb fush\u00ebn e IT.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd475 open-source \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0427\u0435\u043c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a \u0432 \u0418\u0422-\u0441\u0444\u0435\u0440\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-open-source-sistem-upravleniya-sobytiyami-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:16+00:00","article:modified_time":"2020-12-21T07:34:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36204","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:27","updated":"2026-01-22 02:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=36204"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36204\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27082"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=36204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=36204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=36204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}