title: ÐÐ±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ðµ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¾ÑÐºÑÑÑÐ¾Ð¹ Ð¾Ð±Ð»Ð°ÑÐ½Ð¾Ð¹ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼Ñ Ð½Ð° Ð¿ÑÐ¸Ð¼ÐµÑÐµ OpenStack Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð´Ð°Ð½Ð½ÑÑ SIEM
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Securing an open cloud platform on the example of OpenStack with SIEM behavior data analysis
Creators: name: Ð¨Ð°ÑÐ¸Ð¿Ð¾Ð², ÐÐ¼Ð¸ÑÑÐ¸Ð¹
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2022
Subjects: Ð¾Ð±Ð»Ð°ÑÐ½Ð°Ñ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼Ð°
UEBA
OpenStack
SIEM
Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½ÑÐµÑÐºÐ¸Ð¹ Ð°Ð½Ð°Ð»Ð¸Ð·
cloud platform
behavior analytics

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«ÐÐ±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ðµ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¾ÑÐºÑÑÑÐ¾Ð¹ Ð¾Ð±Ð»Ð°ÑÐ½Ð¾Ð¹ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼Ñ Ð½Ð° Ð¿ÑÐ¸Ð¼ÐµÑÐµ OpenStack Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð´Ð°Ð½Ð½ÑÑ SIEMÂ». Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¾Ð¿Ð¸ÑÐ°Ð½Ð¸Ðµ ÑÐ½Ð¸Ð²ÐµÑÑÐ°Ð»ÑÐ½Ð¾Ð³Ð¾ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð° Ð´Ð»Ñ Ð¸Ð½ÑÐµÐ³ÑÐ°ÑÐ¸Ð¸ ÑÐ¸ÑÑÐµÐ¼ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ñ Ð¾Ð±Ð»Ð°ÑÐ½Ð¾Ð¹ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼Ð¾Ð¹. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÐµÑÑÑ ÐºÐ¾Ð½ÑÐµÐ¿Ñ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¾ÑÐºÑÑÑÑÑ Ð¾Ð±Ð»Ð°ÑÐ½ÑÑ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼ Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð´Ð°Ð½Ð½ÑÑ SIEM. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: ÐÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð°ÑÑÐ¸ÑÐµÐºÑÑÑÑ Ð¾ÑÐºÑÑÑÑÑ Ð¾Ð±Ð»Ð°ÑÐ½ÑÑ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼. ÐÐ¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð¸Ðµ Ð¼Ð¾Ð´ÐµÐ»Ð¸ ÑÐ³ÑÐ¾Ð· Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¾Ð±Ð»Ð°ÑÐ½ÑÑ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼. ÐÐ¿Ð¸ÑÐ°Ð½Ð¸Ðµ Ð²Ð¾Ð·Ð¼Ð¾Ð¶Ð½Ð¾ÑÑÐµÐ¹ ÑÐ¸ÑÑÐµÐ¼ UEBA Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸. ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÐµÐ¼ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð°. ÐÐ¿Ð¸ÑÐ°Ð½Ð¸Ðµ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð° Ð´Ð»Ñ Ð¸Ð½ÑÐµÐ³ÑÐ°ÑÐ¸Ð¸ ÑÐ¸ÑÑÐµÐ¼ UEBA Ñ Ð¾ÑÐºÑÑÑÐ¾Ð¹ Ð¾Ð±Ð»Ð°ÑÐ½Ð¾Ð¹ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼Ð¾Ð¹. ÐÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ðµ ÑÐºÑÐ¿ÐµÑÐ¸Ð¼ÐµÐ½ÑÐ°, Ð¿Ð¾Ð´ÑÐ²ÐµÑÐ¶Ð´Ð°ÑÑÐµÐ³Ð¾ ÑÐ°Ð±Ð¾ÑÐ¾ÑÐ¿Ð¾ÑÐ¾Ð±Ð½Ð¾ÑÑÑ ÐºÐ¾Ð½ÑÐµÐ¿ÑÐ°.Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð° Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð° Ð°ÑÑÐ¸ÑÐµÐºÑÑÑÐ° Ð¾ÑÐºÑÑÑÑÑ Ð¾Ð±Ð»Ð°ÑÐ½ÑÑ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼ OpenStack, OpenNebula, Apache CloudStack. ÐÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°ÑÐµÐ»ÐµÐ¹ Ð¸ ÑÑÑÐ½Ð¾ÑÑÐµÐ¹. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» Ð¾Ð¿Ð¸ÑÐ°Ð½ Ð¿Ð¾Ð´ÑÐ¾Ð´ Ð´Ð»Ñ Ð¸Ð½ÑÐµÐ³ÑÐ°ÑÐ¸Ð¸ ÑÐ¸ÑÑÐµÐ¼ UEBA Ñ Ð¾ÑÐºÑÑÑÐ¾Ð¹ Ð¾Ð±Ð»Ð°ÑÐ½Ð¾Ð¹ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼Ð¾Ð¹, Ð±ÑÐ»Ð° Ð¿ÑÐ¾Ð´ÐµÐ¼Ð¾Ð½ÑÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð° ÑÐ°Ð±Ð¾ÑÐ¾ÑÐ¿Ð¾ÑÐ¾Ð±Ð½Ð¾ÑÑÑ ÐºÐ¾Ð½ÑÐµÐ¿ÑÐ°. ÐÐ¿Ð¸ÑÐ°Ð½Ð½ÑÐ¹ Ð¿Ð¾Ð´ÑÐ¾Ð´ Ð¼Ð¾Ð¶ÐµÑ Ð±ÑÑÑ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½ Ð´Ð»Ñ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¾ÑÐºÑÑÑÑÑ Ð¾Ð±Ð»Ð°ÑÐ½ÑÑ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼ Ð² production Ð¾ÐºÑÑÐ¶ÐµÐ½Ð¸Ð¸.
description: The topic of the graduate qualification work is Â«Securing an open cloud platform on the example of OpenStack with SIEM behavior data analysisÂ». The purpose of the study is to describe a universal approach for integrating behavioral analysis systems with a cloud platform. The subject of the work is the concept of securing open cloud platforms using behavior analytics of SIEM data. The research set the following goals:Analysis of the architecture of open cloud platforms. Determination of the cloud platform security threat model. Description of the capabilities of UEBA systems in the field of information security. Research of used methods of behavioral analysis. Description of the approach for integrating UEBA systems with an open cloud platform. Experimental confirmation of the concept's performance. During the work the architecture of open cloud platforms OpenStack, OpenNebula, Apache CloudStack was considered. Modern studies in the field of behavioral analysis of users and entities were analyzed. The work resulted in description of the approach for integrating UEBA systems with an open cloud platform. The performance of the concept was demonstrated. The described approach can be applied to secure open cloud platforms in a production environment.