Overview
Topic status: We're looking for students to study this topic.
This project provides an opportunity to develop experience with the deployment and utilisation of information security management tools. The student will undertake a test deployment of OSSIM, an open source information management tool. OSSIM provides a dashboard that correlates information from a number of different sensors to provide real-time information as to the security posture of a network utilising multiple open source security tools. OSSIM also seeks to provide some indication as to the risk posture of the network. Ultimately the aim is to integrate information available through the use of OSSIM into an information security risk management tool (ISM) that has been developed by the ISI. The project outputs will be likely to include:
- documentation on the ease of deployment of the OSSIM framework
- documentation on the effectiveness of the tools provided by OSSIM
- documentation of the deployment process
- documentation of the information gathered by OSSIM and its potential extraction from the OSSIM database
- documentation of the inbuilt risk tools provided by OSSIM
- test usage of gathered data with the ISM software.
Familiarity with VMware and general knowledge of Linux operating systems and network administration would be advantageous. Some knowledge of Java programming may also be beneficial.
- Study level
- Honours
- Supervisors
- QUT
- Organisational unit
Science and Engineering Faculty
- Research area
- Contact
- Please contact the supervisor.
Dr Ernest Foo
