5G-ENSURE Security research archive

Archive record · Enabler specification

PulSAR: enabler specification (D3.4 v1.0)

A specification for one enabler: anomaly detection and alert correlation.

T3.4Record

About this document

PulSAR answers a single concern in the security monitoring cluster, anomaly detection and alert correlation, and was specified under task T3.4.

It sits with 4 other security monitoring enablers in the catalogue (Generic collector interface, MTG, SSSR and Satellite network monitoring), each specified separately for a concern of its own.

PulSAR was documented twice. This record is the v1.0 text, released with deliverable D3.4 at 30 pages. The v1.3 text of PulSAR, released with D3.8, is held separately at 44 pages, a different deliverable rather than a copy of this one, so a citation should name which of the two it read.

This edition covers the topology inputs directly: the host-interfaces, VLAN, flow-matrix, routing, hosts-VMs and controllers-hosts files the enabler reads.

TypeEnabler specification
ClusterT3.4 · Security monitoring
Length30 pages
File size0.9 MB, PDF