This course aims to teach learners about using the SDACK architecture for security event inspection. The learning outcomes include understanding how to implement a security event inspection platform for APT attack analysis using Spark, Docker, Akka, Cassandra, and Kafka. The course covers Dockerizing each SDACK component, monitoring Docker containers, adjusting resource usage, implementing Docker security policies, developing Docker-based data products, and scaling them out to multi-host Docker clusters. The course teaches skills such as deploying, controlling, streaming, and responding to data, leveraging Docker for algorithm development and product testing, and ensuring product safety before shipping. The teaching method includes presentations, demonstrations, and sharing challenges and lessons learned. This course is intended for data scientists, software developers, system architects, and anyone interested in utilizing the SDACK architecture for security event inspection.
Using the SDACK Architecture on Security Event Inspection - Use Case Track
Overview
Syllabus
Introduction
How to make a software problem
Agenda
Target Scenario
Problem 1 Private Data
Problem 2 Big Volume
System Architecture
Deploy
Demo
Key Features
Control Def Cross
Control Streaming
Response Ream
Data Scientists
Leverage on Docker
Control any application
Testing environment
Anchor benefit eligibility
Microservice capability
Masterslave architecture
Microservice architecture
Service architecture
Service capacity
Security
Configuration
Prevent Disaster
Tools
Further analysis
Lessons learned
Open source components
Monitor configuration file
Summary
Taught by
Docker
