WARDEN – a system for efficient sharing information about detected events (threats). The system as a part of the CESNET Large Infrastructure project developed by the CESNET association.
The WARDEN system enables CERTS/CSIRT teams (and security teams in general) to share and make use of information on detected anomalies in network and services operation generated by different systems – IDS, honeypots, network probes, traffic logs, etc. – easily and efficiently.
The Warden system is currently developed and tested mainly to satisfy the needs of the national research and education network CESNET2 administered by the CESNET association for its members and other entities involved. In the future, we plan to develop the Warden project as open. Until then, non-members of CESNET2 wishing to participate in the project can participate only based on ad-hoc agreements.