Design of a dynamic log management infrastructure using risk and affiliation network analysis
Vasileios Anastopoulos, Sokratis K. Katsikas · 2018
Organizations collect log data for various reasons including security related ones. Log management infrastructures are employed to this end. The large volumes of data generated by various devices, combined with the ever-evolving threat landscape create the need to prioritize and adjust these infrastructures in a dynamic way. In this paper we leverage social network analysis to propose a novel methodology for risk-based asset prioritization that leads to dynamic design of a log management infrastructure. The proposed methodology is applied on a real organization to evaluate its findings.