Skip to content

Conversation

@mohamed-gougam
Copy link

Proposed changes

Introduce a plugin and an extension responsible for collecting, processing, and streaming Security Violation Events.

Key Features:

  • The monitoring extension starts a Syslog server and listens to messages from NGINX App Protect
  • The Syslog messages are parsed, and a SecurityViolationEvent proto message is created
  • The SecurityViolationEvents are batched and sent as a part of EventReport

Main Contributor: @mohamed-gougam

Testing

  • An initial testing and validation of the feature has been completed to verify the end-to-end working of the feature with the NMS Control Plane
  • Unit and Component tests are added where applicable

Checklist

Before creating a PR, run through this checklist and mark each as complete.

  • I have read the CONTRIBUTING document
  • If applicable, I have added tests that prove my fix is effective or that my feature works
  • If applicable, I have checked that any relevant tests pass after adding my changes
  • I have updated any relevant documentation (README.md)

@mohamed-gougam mohamed-gougam self-assigned this Oct 27, 2022
@github-actions github-actions bot added dependencies documentation Improvements or additions to documentation enhancement New feature or request labels Oct 27, 2022
@sanathkumarbs sanathkumarbs changed the title Security mon feature feat: introducing security monitoring feature in NGINX Agent Oct 27, 2022
@sanathkumarbs sanathkumarbs merged commit 9293cfb into main Oct 27, 2022
@oliveromahony oliveromahony deleted the security-mon-feature branch November 21, 2022 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies documentation Improvements or additions to documentation enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants