How Leidos Standardized its Application Logging into Amazon Security Lake with LOIS

This article discusses how Leidos, an AWS Premier Tier Services Partner, standardized its application logging into Amazon Security Lake using its solution called Leidos OCSF Integration Suite (LOIS).

Specifically, the article covers:

• The evolution of application logging and the need for standardization
• How the Open Cybersecurity Schema Framework (OCSF) provides a standard for normalizing log message content
• How Amazon Security Lake provides a centralized location to aggregate logs from various sources
• The architecture and components of LOIS, including SDKs for generating OCSF logs, ETL processes for ingesting logs into Amazon Security Lake, and visualization tools
• A use case demonstrating how LOIS was used to correlate SAML logs and detect potential attacks
• Conclusion highlighting the benefits of standardized and centralized logging using OCSF, Amazon Security Lake, and LOIS