A Management and Monitoring User Interface for an Intrusion and Anomaly Detection System
Lourenço, Pedro Miguel Quitério
MSc Thesis · 2018 · University of Coimbra
Supervisors: Fernando Jorge Penousal Martins Machado, Tiago José dos Santos Martins da Cruz
Abstract
Critical infrastructures are no longer isolated silos. Its operation shares dependencies with other systems and its interconnection with corporate networks expose them to the same cyber-threats all other common systems face. Even though awareness to this hazard has risen only in recent years, several projects are already under development with the goal of mitigating this threat. ATENA is one of such projects that aims to develop a set of innovative tools in the field of intrusion and anomaly detection with an emphasis on critical infrastructures. Integrated within the ATENA project, the goal of this internship is to develop the web front-end for the Intrusion and Anomaly Detection System. This front-end application aims to provide a custom dashboard for intuitive visualization of security events and platform health while also providing an interface for interaction with the agents that control the platform's components. Despite the front-end focus of the project, some back-end work had to be done in order to provide an effective user interface. This resulted in the development of a user management server and two middleware layers that provide a more efficient and performant way to integrate security events and platform health alarms with the user interface. Focusing on the challenges faced during the internship and how they were overcome, this document details the software engineering processes used and the system developed from its conception to its implementation and validation.