Systematic review of SIEM technology: SIEM-SC birth

Velásquez, Juan Miguel López; Monterrubio, Sergio Mauricio Martínez; Crespo, Luis Enrique Sánchez; Rosado, David G.

doi:10.1007/s10207-022-00657-9

Cited by 10 publications

(2 citation statements)

References 88 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The paper analyses the technical requirements, logic, and legal framework of SIEM in the context of the Czech Republic and proposes a framework for utilizing SIEM in cloud computing environments. López et al [23] conducted a comprehensive review of the status and prospects of SIEM technology. The study highlights that SIEM technology is constantly evolving and facing new requirements and demands from users, such as compatibility with cutting-edge technologies (e.g., blockchain, cloud, containers), adherence to international standards and regulations (e.g., GDPR), and improvements in detection engines and response mechanisms.…”

Section: Related Workmentioning

confidence: 99%

Enhancing Cloud Security—Proactive Threat Monitoring and Detection Using a SIEM-Based Approach

Tuyishime,

Balan,

Cotfas

et al. 2023

Applied Sciences

View full text Add to dashboard Cite

With the escalating frequency of cybersecurity threats in public cloud computing environments, there is a pressing need for robust security measures to safeguard sensitive data and applications. This research addresses growing security concerns in the cloud by proposing an innovative security information and event management system (SIEM) that offers automated visibility of cloud resources. Our implementation includes a virtual network comprising virtual machines, load balancers, Microsoft Defender for Cloud, and an application gateway that functions as a web application firewall (WAF). This WAF scans incoming Internet traffic and provides centralized protection against common exploits and vulnerabilities, securing web applications within the cloud environment. We deployed the SIEM system to automate visibility and incident response for cloud resources. By harnessing the power of this employed SIEM, the developed system can continuously monitor, detect security incidents, and proactively mitigate potential security threats. Microsoft Defender for Cloud consistently assesses the configuration of cloud resources against industry standards, regulations, and benchmarks to ensure compliance requirements are met. Our findings highlight the practicality and effectiveness of deploying such solutions to safeguard cloud resources, offering valuable insights to organizations and security professionals seeking sustainable and resilient security measures in the cloud computing environment.

show abstract

Section: Related Workmentioning

confidence: 99%

Enhancing Cloud Security—Proactive Threat Monitoring and Detection Using a SIEM-Based Approach

Tuyishime,

Balan,

Cotfas

et al. 2023

Applied Sciences

View full text Add to dashboard Cite

show abstract

“…A survey of the application of SIEM/XSOAR/XDR technologies in a variety of industries is discussed briefly. The literature cited starts with challenges identified in SIEM technologies and then covers the latest review on the state of SIEM [1,2]. The industries and domains covered are Air Traffic Control (ATC) [1], Intrusion Detection Systems (IDS) [3], Industrial Control Systems (ICS) and critical infrastructures [4,5], and Wind Energy Systems [6].…”

Section: Introductionmentioning

confidence: 99%

A Proposed Approach to Integrate Application Security Vulnerability Data with Incidence Response Systems

Kasturi,

Li,

et al. 2024

AJNC

View full text Add to dashboard Cite

This paper has proposed a method to develop an attack tree, from application vulnerability data discovered through tests and scans and correlation analysis using incoming transaction requests monitored by a Web Application Firewall (WAF) tool. The attack tree shows multiple pathways for an attack to shape through vulnerability linkages and a deeper analysis of the Common Weakness Enumeration (CWE) and Common Vulnerability Exposure (CVE) mapping to individual vulnerabilities. By further relating to a parent, peer, or child CWE (including CWEs that follow another CWE and in some cases precede other CWEs) will provide more insight into the attack patterns. These patterns will reveal a multi-vulnerability, multi-application attack pattern which will be hard to visualize without data consolidation and correlation analysis. The correlation analysis tied to the test and scan data supports a vulnerability lineage starting from incoming requests to individual vulnerabilities found in the code that traces a possible attack path. This solution, if automated, can provide threat alerts and immediate focus on vulnerabilities that need to be remedied as a priority. SOAR (Security Orchestration, Automation, and Response), XSOAR (Extended Security Orchestration, Automation, and Response), SIEM (Security Information and Event Management), and XDR (Extended Detection and Response) are more constructed to suit networks, infrastructure and devices, and sensors; not meant for application security vulnerability information as collected. So, this paper makes a special case that must be made for integration of application security information as part of threat intelligence, and threat and incident response systems.

show abstract

How to assess measurement capabilities of a security monitoring infrastructure and plan investment through a graph-based approach

Palma,

Sorrentino,

Bonomi

2025

Expert Systems with Applications

View full text Add to dashboard Cite

Systematic review of SIEM technology: SIEM-SC birth

Cited by 10 publications

References 88 publications

Enhancing Cloud Security—Proactive Threat Monitoring and Detection Using a SIEM-Based Approach

Enhancing Cloud Security—Proactive Threat Monitoring and Detection Using a SIEM-Based Approach

A Proposed Approach to Integrate Application Security Vulnerability Data with Incidence Response Systems

How to assess measurement capabilities of a security monitoring infrastructure and plan investment through a graph-based approach

Contact Info

Product

Resources

About