Hybrid Approach to Provide Situational Awareness for Information Security in Computational Environments

With the technological advances that permeate the computer systems, the technologies are increasingly integrated into people's daily lives. Unfortunately, all the facilities offered by these advances are becoming targets for malicious attacks. Although different technologies are used to provide information security, they do not present a view of the environment as a whole. Thus, this paper presents an approach to provide situational awareness for security in computational environments, producing a holistic view. This approach explores different features since the acquisition of event, a hybrid processing, hybrid data storage, and the resulting actuation. The proposed approach was evaluated through of a prototype, which was applied in three use cases, showing to be stable and flexible in the provision of security aspects in computational environments.