Scholarlink

<p>Currently, security is increasingly important within business information systems. In addition, aspects such as sustainability and energy consumption associated with security controls are becoming increasingly relevant. Therefore, it is important to be able to ensure that the controls are not only met safe, but also sustainable. This paper presents a proposal called SIEM-SC (System Information and Event Management - Secure compliance) for the construction of a model that allows guaranteeing privacy in the events obtained by a SIEM system, analysing this model not only from the point of view of privacy preservation, but also from the point of view of sustainability. The development has been carried out, analysing the private information contained in different tracelogs obtained through a SIEM system and previously performing a formalisation of the datasets used, which has subsequently allowed a systematised analysis of the consumption of resources in different dimensions. NIST 800-53 and ISO 27002 are contrasted against SIEM-SC to highlight the domains and controls covered by this novel proposal. In conclusion, an additional security layer is required to guarantee the privacy of personal data. This security layer has relevant costs in the consumption of resources depending on whether it is implemented in one way or another. This document also includes future proposals based on the findings and errors in the process.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

SIEM-SC initial assessments: Towards a Sustainable and Compliant proposal for Security Information and Event Management

  • 期刊论文

  • 发表日期：

    2025年8月26日

查看全文
  • Juan Miguel López Velásquez,
  • Sergio Mauricio Martínez Monterrubio,
  • Luis Enrique Sánchez Crespo,
  • David G. Rosado

摘要

Currently, security is increasingly important within business information systems. In addition, aspects such as sustainability and energy consumption associated with security controls are becoming increasingly relevant. Therefore, it is important to be able to ensure that the controls are not only met safe, but also sustainable. This paper presents a proposal called SIEM-SC (System Information and Event Management - Secure compliance) for the construction of a model that allows guaranteeing privacy in the events obtained by a SIEM system, analysing this model not only from the point of view of privacy preservation, but also from the point of view of sustainability. The development has been carried out, analysing the private information contained in different tracelogs obtained through a SIEM system and previously performing a formalisation of the datasets used, which has subsequently allowed a systematised analysis of the consumption of resources in different dimensions. NIST 800-53 and ISO 27002 are contrasted against SIEM-SC to highlight the domains and controls covered by this novel proposal. In conclusion, an additional security layer is required to guarantee the privacy of personal data. This security layer has relevant costs in the consumption of resources depending on whether it is implemented in one way or another. This document also includes future proposals based on the findings and errors in the process.