Result description
SPHINX Analytics Engine is based on Docker framework making it suitable for cloud and on-premise installations. The Analytics engine provides the ability to monitor how many attacks identified and the attack events based on historical data for a time interval. It Provides bar plots used for the visualization of the identified event and provides all the required information to address future events.Τhe information can be used from other cybersecurity services and end-users to detect suspicious or malicious cyber activities, identify their type and do appropriate courses of action that can be used to stop the detected attacks and vulnerabilities.
Addressing target audiences and expressing needs
- Collaboration
We would like to test the AE on additional use cases and a real environment and gather the end-user feedback towards enhancing the AE performance.
- Public or private funding institutions
- Research and Technology Organisations
R&D, Technology and Innovation aspects
Finalise demonstrator use case and evaluation. Continue developing the AE.
The AE relies heavily on the availability of data. Given that the AE would be fed with the necessary data, it would be possible to enhance and/or expand its current functionality and provide additional descriptive anlytics, presented in a way that would be optimal for the end user.
The AE solution can be applied in any IT infrastructure with consistent results.
Currently, the AE serves as a secondary component in the support of the end user’s decision-making process. It provides the descriptive (what happened) analytics and supports the DSS which is providing predictive (what is most likely to happen) and prescriptive (recommended actions to affect the outcome) analytics. The AE is highly replicable and applicable in almost any IT infrastucture without needing heavy parameterisation and could stand as an independent component, as well as part of an existing component.
