Scholarlink

In the context of rapidly advancing cyber threats, ransomware stands out as a particularly destructive challenge that exploits vulnerabilities to significantly disrupt operations. This project explores the feasibility of using OpenSearch’s Security Analytics in conjunction with Wazuh to detect cyberattacks through log data correlation analysis. Various integration methods, including server integration, indexer integration, and direct plugin integration, were tested for its ability to effectively correlate alerts and identify potential ransomware threats in simulated settings. The findings provide essential insights into optimal practices and configurations for using OpenSearch’s Security Analytics to enhance Wazuh’s functionality.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

The Feasibility of OpenSearch’s Security Analytics with Wazuh

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Cheryl Ching Tay,
  • Darshan Kumar,
  • Rachel Ying Xuan Poh,
  • Randy Yi Ping Cheang,
  • Villarico Gabriel Babiera,
  • Huaqun Guo,
  • Liming Lu

摘要

In the context of rapidly advancing cyber threats, ransomware stands out as a particularly destructive challenge that exploits vulnerabilities to significantly disrupt operations. This project explores the feasibility of using OpenSearch’s Security Analytics in conjunction with Wazuh to detect cyberattacks through log data correlation analysis. Various integration methods, including server integration, indexer integration, and direct plugin integration, were tested for its ability to effectively correlate alerts and identify potential ransomware threats in simulated settings. The findings provide essential insights into optimal practices and configurations for using OpenSearch’s Security Analytics to enhance Wazuh’s functionality.