A4MtCS

E2E: Event To Evidence

We have designed a deployment framework so as to regroup the functionalities of the E2E approach. As shown in this Figure, this framework is extension of the MobMtCS component, and contains basically three components: Evidence processor, Evidence persistence and Mt evidence repository.

In the following, we briefly introduce the elements of the E2E deployment architecture:

• Evidence processor: It parses event logs to generate evidences by following the Algorithm,

• Evidence persistence: It ensures the storage of evidences in the Mt evidence repository,

• Mt evidence repository: It stores Mt evidences, and represents the input of the analysis system ensuring post-violation analysis by crawling these evidences.