Principles of Survivability and Information Assurance
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
This paper describes the development and proposed application of a Security Information and Event Management (SIEM) signature to detect possible malicious insider activity leading to IT sabotage. In the absence of a uniform, standardized event logging format, this paper presents the signature in two of the most visible public formats, Common Event Framework (CEF) and Common Event Expression (CEE). Because of the limitations of these formats, the SIEM described in this paper employs an operational version of the proposed signature in an ArcSight environment.
Cite This SEI Report
Software Engineering Institute (2011, April 1). Principles of Survivability and Information Assurance. Retrieved August 14, 2026, from https://www.sei.cmu.edu/library/principles-of-survivability-and-information-assurance/.
@techreport{Citekey_2011,
author={Software Engineering Institute},
title={Principles of Survivability and Information Assurance},
month={Apr},
year={2011},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/principles-of-survivability-and-information-assurance/},
note={Accessed: 2026-Aug-14}
}
Software Engineering Institute. "Principles of Survivability and Information Assurance." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, April 1, 2011. https://www.sei.cmu.edu/library/principles-of-survivability-and-information-assurance/.
Software Engineering Institute, "Principles of Survivability and Information Assurance," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 1-Apr-2011 [Online]. Available: https://www.sei.cmu.edu/library/principles-of-survivability-and-information-assurance/. [Accessed: 14-Aug-2026].
Software Engineering Institute. "Principles of Survivability and Information Assurance." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 1 Apr. 2011. https://www.sei.cmu.edu/library/principles-of-survivability-and-information-assurance/. Accessed 14 Aug. 2026.
Software Engineering Institute. Principles of Survivability and Information Assurance. Software Engineering Institute. 2011. https://www.sei.cmu.edu/library/principles-of-survivability-and-information-assurance/