Previous Topic: Type 2: Remote EventNext Topic: Type 4: Distributed Observed Event


Type 3: Observed Event

The third type of event is the observed event. This type of event involves three entities where the agent and event source are the same entity. However this entity is not the source or destination of the event.

An example of this type of event is a Network IDS or firewall observing a connection between two network entities.

Source

Destination

Event Source

Agent

Host A

Host B

Host C

Host C