Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 R2 - LOG MANAGEMENT ADMINISTRATION GUIDE REV 1, Руководство пользователя

Страница: 127 / 246

STRM Users Guide
Managing Offenses By Networks 121
Table 5-34 Offense Panel Toolbar
Icon Function
Allows you to view all attackers for this offense including:
•
Flag - Specifies action taken on the attacker, for example, if a flag
appears, the attacker is marked for follow-up. Point your mouse over
the icon to display additional information.
•
Identity - Specifies the IP address of the attacker.
•
Location - Specifies the location of the attacker.
•
Magnitude - Specifies the relative importance of this attacker. The
magnitude bar provides a visual representation of all the correlated
variables of the attacker. Variables include the vulnerability
assessment risk and the amount of threat posed. Point your mouse
to the magnitude bar to values for the offense and the calculated
magnitude.
Threat Posed - The calculated value for this attacker over time, that
indicates how severe the attacker is compared to all other attackers
in your network.
Vulnerability Risk - The vulnerability assessment risk level (0 to 10)
for the asset where 0 is the lowest and 10 is the highest. This is a
weighted value against all other hosts in your deployment.
•
Offenses -Specifies the number of offenses associated with this
attacker.
•
Local Target(s)/Dest - Specifies the number of targets associated
with this attacker.
•
Events - Specifies the number of events associated with this
attacker.
For more information on attackers, see
Managing Offenses By
Attacker
.