CSN13: Mozilla’s Use of CEF in their Web Applications

Document created by jmerrill on Sep 12, 2010Last modified by jmerrill on Jul 8, 2014
Version 2Show Document
  • View in full screen mode

Mozilla’s Use of CEF in their Web Applications
Christopher Lyon, Director of Infrastructure Security, Mozilla
Level: Intermediate
Mozilla is leveraging CEF in their Web applications for general logging and to identify potential security issues. The use of CEF creates a foundation for applying security correlation to narrow down potential security issues, and ArcSight Logger provides the ability to search upon this data. This session covers why, where and how Mozilla is using CEF, the types of alerts and various use cases. Reasons and technical limitations that drove these changes with Mozilla Web applications will also be discussed. Attendees should have a basic understanding of CEF, ArcSight ESM and ArcSight Logger.