An event-based platform for collaborative threats detection and monitoring
We discuss the Semantic Room (SR) abstraction, which enables the construction of collaborative platforms for data aggregation and correlation aimed at early detecting attacks and frauds. We describe an SR for detecting port scanning by presenting two different implementations: one uses a centralized CEP engine (Esper) while the other employs a distributed one (Storm). We propose an SR for the monitoring of financial frauds which correlates information coming from Italian banks and other financial institutions; this SR also provides privacy-preserving mechanisms.
collaborative information systems information systems monitoring event processing security threats fraud monitoring