MISP v MISP Malware Information Sharing Platform v

  • Slides: 22
Download presentation

MISP 介� v MISP: Malware Information Sharing Platform v 主� : http: //www. misp-project.

MISP 介� v MISP: Malware Information Sharing Platform v 主� : http: //www. misp-project. org/ 3

MISP 代�与文档 v v v Github： l 核心代�： https: //github. com/MISP l 外��目： https:

MISP 代�与文档 v v v Github： l 核心代�： https: //github. com/MISP l 外��目： https: //github. com/MISP 文档: l 官网文档� : http: //www. misp-project. org/documentation/ l github 文档�目 : https: //github. com/MISP/misp-book 各种格式的文档下�： l HTML: https: //www. circl. lu/doc/misp/ l PDF: https: //www. circl. lu/doc/misp/book. pdf l Kindle MOBI: https: //www. circl. lu/doc/misp/book. mobi l EPUB: https: //www. circl. lu/doc/misp/book. epub 5

WLCG: Worldwide LHC Computing Grid 42 个国家 170+ 个站点，每年处理 50 -70 PB 数据 7

WLCG: Worldwide LHC Computing Grid 42 个国家 170+ 个站点，每年处理 50 -70 PB 数据 7

WLCG MISP Community 8

WLCG MISP Community 8

数据存�与交� v 数据模型：MISP 以事件(event)及其属性(attributes)来��情�数据 v 数据存�：�构化数据，存�于 My. SQL 和 Redis 数据� v 数据交�格式： JSON

数据存�与交� v 数据模型：MISP 以事件(event)及其属性(attributes)来��情�数据 v 数据存�：�构化数据，存�于 My. SQL 和 Redis 数据� v 数据交�格式： JSON v 支持多种数据�入�出格式： v l �出格式： IDS, Open. IOC, Plain text, CSV, MISP XML, JSON, Cache format, STIX, NIDS export, RPZ zone, etc. l �入格式： bulk-import, batch-import, import from Open. IOC, GFI sandbox, Threat. Connect CSV, STIX 1. 1/2. 0, etc l 可通� misp-modules 支持更多数据交�格式 互相信任的 MISP �例之�可以自�交�和同步数据 9

外��目： MISP Dashboard 16

外��目： MISP Dashboard 16

MISP 安装部署 v 安装部署流程指南： l v 从源代�安装： l v v https: //github. com/MISP/tree/2. 4/INSTALL

MISP 安装部署 v 安装部署流程指南： l v 从源代�安装： l v v https: //github. com/MISP/tree/2. 4/INSTALL 使用 Puppet/Ansible 自�化安装部署： l https: //github. com/voxpupuli/puppet-misp l https: //github. com/juju 4/ansible-MISP 使用 VM 方式部署 l v http: //www. misp-project. org/download/ https: //www. circl. lu/doc/misp/get-your-instance/ 使用 Container 方式部署 l https: //github. com/misp-docker l https: //github. com/misp/docker-misp 17

misp. ihep. ac. cn 19

misp. ihep. ac. cn 19

MISP RCTS CERT Malware Information Sharing Platform VitorMISP RCTS CERT Malware Information Sharing Platform Vitor
MALWARE WAT IS MALWARE Malware is een verzamelnaamMALWARE WAT IS MALWARE Malware is een verzamelnaam
Malware Pengertian Malware Jenis jenis Malware Jalur MasuknyaMalware Pengertian Malware Jenis jenis Malware Jalur Masuknya
Malware Malware y ms Malware Cmo me puedoMalware Malware y ms Malware Cmo me puedo
Malware Pengertian Malware Jenis jenis Malware Jalur MasuknyaMalware Pengertian Malware Jenis jenis Malware Jalur Masuknya
Benchmarking Visualization Platform The Platform Brief description PlatformBenchmarking Visualization Platform The Platform Brief description Platform
Branding Platform Prologue Branding Platform Introduction Branding PlatformBranding Platform Prologue Branding Platform Introduction Branding Platform
Sharing responsibility SHARING RESPONSIBILITY SHARING RESPONSIBILITY I willSharing responsibility SHARING RESPONSIBILITY SHARING RESPONSIBILITY I will
Sharing Is Caring What is sharing Sharing isSharing Is Caring What is sharing Sharing is
KNOWLEDGE SHARING TRANSFER KNOWLEDGE SHARING TRANSFER Knowledge sharingKNOWLEDGE SHARING TRANSFER KNOWLEDGE SHARING TRANSFER Knowledge sharing
Virus Primer Malware n Classifications of Malware TheVirus Primer Malware n Classifications of Malware The
Malware Malicious Software 9252020 Malware 1 Viruses WormsMalware Malicious Software 9252020 Malware 1 Viruses Worms
Malware Categorisation in Support of Malware Policy AnalysisMalware Categorisation in Support of Malware Policy Analysis
Lines of Defense against Malware Prevention Keep MalwareLines of Defense against Malware Prevention Keep Malware
Malware Malicious Software 1112020 Malware 1 Viruses WormsMalware Malicious Software 1112020 Malware 1 Viruses Worms
SICUREZZA INFORMATICA I MALWARE Malware Nella sicurezza informaticaSICUREZZA INFORMATICA I MALWARE Malware Nella sicurezza informatica
Malware Fighting Spyware Viruses and Malware Ch 1Malware Fighting Spyware Viruses and Malware Ch 1
Chapter 9 Applications Benevolent Malware q Benevolent malwareChapter 9 Applications Benevolent Malware q Benevolent malware
Malware Classification And Detection Matt Banick Malware AMalware Classification And Detection Matt Banick Malware A
Malware Malicious Software 11262020 Malware 1 Viruses WormsMalware Malicious Software 11262020 Malware 1 Viruses Worms
Chapter 4 Malware CSCI 455 2242021 Malware 1Chapter 4 Malware CSCI 455 2242021 Malware 1