flyballlabs / threatdetectionservice

Threat Management Platform with Apache Metron as the core engine
Apache License 2.0
6 stars 3 forks source link

Agent Authentication #34

Open devopsec opened 7 years ago

devopsec commented 7 years ago

Users are authenticated by the api but agents should have verification as well. At a minimum, when an agent calls to the api, it should be checked against the database, if their is a match then we know an authenticated user created that agent. This will alleviate any script injection or zombie agent usage.