Paper: Security information and event management (SIEM): Analysis, trends and usage in critical infrastructures

• Number of downloads 169
• File size 339.87 KB
• Upload-Date 20. July 2021
• Download

Security Information and Event Management (SIEM) systems have been widely deployed as a powerful tool to prevent, detect and react against cyber-attacks. SIEM solutions have evolved to become comprehensive systems that provide a wide visibility to identify areas of high risks and proactively focus on mitigation strategies aiming at reducing costs and time for incident response. Currently, SIEM systems and related solutions are slowly converging with big data analytics tools. We survey the most widely used SIEMs regarding their critical functionality, and provide an analysis of external factors affecting the SIEM landscape in mid and long-term. A list of potential enhancements for the next generation of SIEMs is provided as part of the review of existing solutions as well as an analysis on their benefits and usage on Critical Infrastructures.