Integrating Next-Generation SIEM with Data Lakes and AI: Advancing Threat Detection and Response

Rahul Marri (), Sriram Varanasi () and Satwik Varma Kalidindi Chaitanya ()

Journal of Artificial Intelligence General science (JAIGS) ISSN:3006-4023, 2024, vol. 3, issue 1, 446-465

Abstract: The article focuses on how Next-Gen SIEM can be extended with Data Lakes and AI to improve threat detection and response in current threat landscapes. Conventional SIEM tools have several major disadvantages: they could be more scalable, their false positive rates can be extremely high, and data processing takes too much time due to the constantly growing number and levels of sophistication in cyber threats. These limitations may result in delayed threat detection, alert fatigue, and operations nightmares for security operations. Data Lakes form the center of the proposed architecture to ensure the large raw, unstructured data from different sources are integrated and analyzed in real time. When applied, the system will be able to identify anomalies, evolve with threats, and improve on false positives with the help of superior machine learning algorithms. This integration also solves most of the inherent problems of traditional SIEM and provides more general and efficient solutions for improved security postures for organizations, as this article describes how to orientate CSFs for cybersecurity and SOCs. It demonstrates how various current integrated security technologies improve the detection rates, accuracy, the burden on the security personnel and the human information defense system.

Keywords: Next-Gen SIEM; Data Lakes; Machine Learning; Anomaly Detection; Cybersecurity Automation; Threat Response (search for similar items in EconPapers)
Date: 2024
References: Add references at CitEc
Citations:

Downloads: (external link)
https://newjaigs.com/index.php/JAIGS/article/view/263 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:das:njaigs:v:3:y:2024:i:1:p:446-465:id:263

Access Statistics for this article

Journal of Artificial Intelligence General science (JAIGS) ISSN:3006-4023 is currently edited by Justyna Żywiołek

More articles in Journal of Artificial Intelligence General science (JAIGS) ISSN:3006-4023 from Open Knowledge
Bibliographic data for series maintained by Open Knowledge ().