DETECTION AND REPRESENTATION OF THREATS AND ATTACKS ON PORTAL

Managed Security Service is the analysis, and interpretation of log data. There is a need for organization investigators in locating internal and external threats/attacks. There is a requirement of software that should reduce the tedious efforts of organization examiners, especially when searching for dangerous attacks which may be a threat to the company. A method is proposed here that uses visualization techniques to represent attack statistics, such as attack location, attack date, when it was solved date, attackers etc. The user interface to this software displays graphical representation of log file about attacks. By viewing attack information graphically, the developed software will reduce the examiner’s analysis time and greatly increase the probability of locating attack evidence. The graphical representation of log files rather than traditional text will greatly aid the organizations by reducing the time to identify suspicious attacks and increases the probability of locating the criminal evidence. The purpose of this project is to correlate event data and represent these in a consistent context with the help of a graphical user interface. The main objective is log extraction, statistics generation and graphical representation. This works by reading the log files generated by the firewalls and storing it to the repositories. Later database is then used to create a statistics page, GIF charts, attackers-map etc.