Overview of Security Information and Event Management Systems

Cosmin Macaneata ()

Informatica Economica, 2024, vol. 28, issue 1, 15-24

Abstract: Organizations face continuous risks of cybersecurity breaches and malicious activities. Reviewing logs is a critical activity to identify these threats, but the large volume of systems and data often presents an insurmountable challenge. As IT infrastructures expand, logs multiply exponentially, making the traditional manual log analysis extremely difficult and prone to missing key events. Also, this high volume of information combined with the uncorrelation of logs makes traditional approaches ineffective, especially in detecting sophisticated attacks. The solution to this challenge is deploying a Security Information and Event Management (SIEM) system, who collects, correlates, and analyze disparate logs from various sources in real-time, offering a complete overview of the organization's security. By automating the log review and providing detailed information, SIEM not only resolves the problem of log overload but also significantly improves threat detection and incident re-sponse capabilities. This paper presents the overview of SIEM systems and highlights the ways in which they can overcome these issues.

Keywords: SIEM; Security Event Management; Cybersecurity; Information Security; Security Logs analysis (search for similar items in EconPapers)
Date: 2024
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.revistaie.ase.ro/content/109/02%20-%20macaneata.pdf (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aes:infoec:v:28:y:2024:i:1:p:15-24

Access Statistics for this article

Informatica Economica is currently edited by Ion Ivan

More articles in Informatica Economica from Academy of Economic Studies - Bucharest, Romania Contact information at EDIRC.
Bibliographic data for series maintained by Paul Pocatilu ().