By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

AWS用于账户异常检测和入侵检测的服务是什么？

0

【以下的问题经过翻译处理】 在AWS账户中是否可以启用基于异常的入侵检测的功能？如果有，是哪个服务？对我来说，GuardDuty和Detective中的能力不是很清晰（文档中提到：“使用规则集和机器学习的方式来分析VPC流日志、DNS、Cloudtrail等数据”）。

Topics
Security, Identity, & ComplianceMachine Learning & AI
Tags
Amazon GuardDutyAmazon DetectiveMachine Learning & AI
Language
中文 (简体)
profile picture
EXPERT
rePost Polyglot
asked 8 months ago41 views
1 Answer
0

【以下的回答经过翻译处理】 首先建议参考此白皮书 https://d1.awsstatic.com/whitepapers/aws_security_incident_response.pdf

其次可以参考该链接，https://aws.amazon.com/blogs/security/why-we-reduce-complexity-and-rapidly-iterate-on-amazon-guardduty-twelve-new-detections-added/

将AWS GuardDuty与AWS CloudTrail服务一起使用是目前可选的方式，或者您可以使用Marketplace上的Alert Logic方案。

profile picture
EXPERT
rePost Polyglot
answered 8 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content