Effectiveness of Information Security Control using Audit Logs

Kostiuk, Yuliia and Skladannyi, Pavlo and Sokolov, Volodymyr and Zhyltsov, Oleksii and Ivanichenko, Yevhen (2025) Effectiveness of Information Security Control using Audit Logs Cybersecurity Providing in Information and Telecommunication Systems 2025 (3991). pp. 524-538. ISSN 1613-0073

Text Y_Kostiuk_P_Skladannyi_V_Sokolov_O_Zhyltsov_Y_Ivanichenko_CIPTS_2025_3991.pdf Download (1MB)

Abstract

With the ever-increasing interconnectedness of computers through corporate networks and the Internet, ensuring information security and implementing appropriate security policies and procedures is becoming increasingly important. An essential aspect of security is information registration in security audit logs. At present, information security is ensured through corporate application packages that use security agents specific to each platform. These agents are installed on workstations to provide security, but they have limited capabilities and are only part of the application suite. There is a need to find optimized solutions. When detecting an attack, the proactive audit system makes a decision on neutralization, taking into account the type of object and attack conditions, and performs various measures, such as notifying the administrator, blocking user access, and rebooting the workstation. The general model of proactive audit logs eliminates agents and places security audit logs on a remote server. The server can perform a thorough and intelligent analysis of audit logs to effectively verify and enforce security policies in a more comprehensive format. This paper aims to analyze and study the use of audit logs for security purposes in enterprise products.

Item Type:	Article
Uncontrolled Keywords:	security audit; information security; audit log; security policy; monitoring; security agents; process model; fuzzy Petri net
Subjects:	Статті у базах даних > Scopus (без квартилю)
Divisions:	Факультет інформаційних технологій та математики > Кафедра інформаційної та кібернетичної безпеки ім. професора Володимира Бурячка
Depositing User:	Павло Миколайович Складанний
Date Deposited:	22 Jul 2025 08:25
Last Modified:	22 Jul 2025 08:25
URI:	https://elibrary.kubg.edu.ua/id/eprint/52541

Actions (login required)

View Item