Information Security Analytics

Chapter 5

Access Analytics

Abstract

Since the technologies providing the convenience to remotely access our IT systems can be manipulated by the malicious actors, it is important to have a security program to quickly identify the misuse of systems. We do this by using access analytics. In this chapter, we use a programming language called Python, which is used to create programs for detection strategies, and apply it to a scenario involving virtual private network logs.

Keywords

Access analytics; Knowledge engineering; MaxMind GeoIP; Programming detection strategies; Python; Remote access technologies; Scripting; Security analytics; Virtual private network; VPN

Information in This Chapter

▪ Access Analytics (30 pages)

▪ Scenarios and Challenges in User ...