Zde můžete vidět rozdíly mezi vybranou verzí a aktuální verzí dané stránky.
| Obě strany předchozí revize Předchozí verze Následující verze | Předchozí verze | ||
|
en:index [07.09.2018 10:22] mach@cesnet.cz |
en:index [07.09.2018 12:01] mach@cesnet.cz |
||
|---|---|---|---|
| Řádek 2: | Řádek 2: | ||
| //**Mentat** is a distributed modular [[https://en.wikipedia.org/wiki/Security_information_and_event_management|SIEM]] (Security Information and Event Management System) designed to monitor networks of all sizes. Its architecture enables reception, storage, analysis, processing and response to a great volume of security incidents originating from various sources, such as honeypots, network probes, log analysers, third party detection services, etc. The **Mentat** system has been developed as an open-source project.// | //**Mentat** is a distributed modular [[https://en.wikipedia.org/wiki/Security_information_and_event_management|SIEM]] (Security Information and Event Management System) designed to monitor networks of all sizes. Its architecture enables reception, storage, analysis, processing and response to a great volume of security incidents originating from various sources, such as honeypots, network probes, log analysers, third party detection services, etc. The **Mentat** system has been developed as an open-source project.// | ||
| + | |||
| + | ---- | ||
| + | |||
| + | This is the official website for the Mentat system as an open project. If you are looking for information about the Mentat system as a service operated by [[https://www.cesnet.cz/?lang=en|CESNET, a.l.e.]] please go to the [[https://csirt.cesnet.cz/en/services/mentat|website of Mentat system]] managed by [[https://csirt.cesnet.cz/en/index|CESNET-CERTS]] security team. | ||
| ---- | ---- | ||
| Řádek 13: | Řádek 17: | ||
| {{ ::mentat-overview.png?nolink |Přehled systému Mentat}} | {{ ::mentat-overview.png?nolink |Přehled systému Mentat}} | ||
| - | //Mentat// is designed as a distributed modular system with the emphasis on security, extendability and scalability. The core of the system is implemented similarly to the [[http://www.postfix.org/|Postfix MTA]]. It consists of many simple modules/daemons, each of is responsible for performing a particular ‘simple’ task. This approach enables smooth parallelization and extendability. All modules use the same core service framework, which makes implementing new modules an easy task. System is implemented in [[https://www.python.org/|Python3]]. | + | //Mentat// is designed as a distributed modular system with the emphasis on security, extendability and scalability. The core of the system is implemented similarly to the [[http://www.postfix.org/|Postfix MTA]]. It consists of many simple modules/daemons, each of is responsible for performing a particular ‘simple’ task. This approach enables smooth parallelization and extendability. All modules use the same core service framework, which makes implementing new modules an easy task. |
| - | //Mentat// uses the [[https://www.postgresql.org/|PostgreSQL]] as persistent data storage. The system uses the [[https://idea.cesnet.cz/en/index|IDEA]] data model, which is based on [[http://www.json.org/|JSON]]. It was specifically designed to describe and contain a wide range of different security events and with further extendability in mind. | + | The whole system is implemented in [[https://www.python.org/|Python3]] and uses the [[https://www.postgresql.org/|PostgreSQL]] as persistent data storage. It uses the [[https://idea.cesnet.cz/en/index|IDEA]] data model, which is based on [[http://www.json.org/|JSON]] format and was specifically designed to describe and contain a wide range of different security events and with further extendability in mind. Mentat itself does not have any network communication protocol for receiving events/messages directly. Instead it relies on the services of [[https://warden.cesnet.cz/en/index|Warden]] security information exchange platform. |
| - | Currently, the working prototype of the //Mentat// system is being operated successfully. It accepts events from many internal and external sources. The system processes approximately 2 million events per day. The crucial and most apparent component of the entire system is an automatic reporter module which distributes information about security incidents directly to the responsible administrators within the [[https://www.cesnet.cz/services/ip-connectivity-ip/cesnet2-network/?lang=en|CESNET2]] network (//AS2852//). | + | Currently, the working prototype of the //Mentat// system is being operated successfully as a service for customers and partners of [[https://www.cesnet.cz/?lang=en|CESNET, a.l.e.]]. It accepts events from many internal and external sources. The system processes approximately 2 million events per day. The crucial and most apparent component of the entire system is an automatic reporter module which distributes information about security incidents directly to the responsible administrators within the [[https://www.cesnet.cz/services/ip-connectivity-ip/cesnet2-network/?lang=en|CESNET2]] network (//AS2852//). |
CESNET, z. s. p. o.
Generála Píky 26
16000 Prague 6
Tel: +420 234 680 222
Fax: +420 224 320 269
info@cesnet.cz
Tel: +420 234 680 222
GSM: +420 602 252 531
Fax: +420 224 313 211
support@cesnet.cz