ModSecurity IDMEF module
Anton Baláž, Norbert Ádám, Emília Pietriková, Branislav Madoš · 2018
The paper designs intrusion detection system based on ModSecurity and Prelude system. Main goal is to supplement ModSecurity module which acts as a firewall in application layer by exporting messages into Prelude SIEM system. Since ModSecurity does not support format IDMEF, the paper proposes a design to implement particular ModSecurity events exporting and next Prelude events managing.