The main goal of this bachelor thesis is to propose modular web server log analysis platform for cyber attack detection and implement a module detecting common attacks on Apache web server.

• Student will analyse problem of centralized high-performance and scalable logs analysis and attacks detection approaches and tools, focusing mainly on web server access logs.
• Student will propose a solution using open-source tools and design and implement a scalable modular analyser platform.
• Comprehensive and usable API for further extensibility of this platform is to be developed and sufficiently documented.
• A proof of concept module for detection of common attacks on Apache web server will be implemented and tested.

The language of the thesis will be English.

Programming language: Rust

Literature:

• Security Log Management: Identifying Patterns in the Chaos
• Open Web Application Security Project (https://www.owasp.org/)
• Detecting Attacks on Web Applications from Log Files (https://www.sans.org/reading-room/whitepapers/logging/detecting-attacks-web-applications-log-files-2074)
• Detection of attack-targeted scans from the Apache HTTP Server access logs: (https://www.sciencedirect.com/science/article/pii/S2210832717300169)
• Rust language (https://www.rust-lang.org/en-US/documentation.html)