Closing the loop of SIEM analysis to Secure Critical Infrastructures

Alessia Garofalo; Cesario Di Sarno; Ilaria Matteucci; Marco Vallini; Valerio Formicola

Closing the loop of SIEM analysis to Secure Critical Infrastructures

Cryptography and Security 2014-05-14 v1

Authors: Alessia Garofalo , Cesario Di Sarno , Ilaria Matteucci , Marco Vallini , Valerio Formicola

Abstract

Critical Infrastructure Protection is one of the main challenges of last years. Security Information and Event Management (SIEM) systems are widely used for coping with this challenge. However, they currently present several limitations that have to be overcome. In this paper we propose an enhanced SIEM system in which we have introduced novel components to i) enable multiple layer data analysis; ii) resolve conflicts among security policies, and discover unauthorized data paths in such a way to be able to reconfigure network devices. Furthermore, the system is enriched by a Resilient Event Storage that ensures integrity and unforgeability of events stored.

Keywords

computer security cloud security cybersecurity

Cite

@article{arxiv.1405.2995,
  title  = {Closing the loop of SIEM analysis to Secure Critical Infrastructures},
  author = {Alessia Garofalo and Cesario Di Sarno and Ilaria Matteucci and Marco Vallini and Valerio Formicola},
  journal= {arXiv preprint arXiv:1405.2995},
  year   = {2014}
}

Comments

EDCC-2014, BIG4CIP-2014, Security Information and Event Management, Decision Support System, Hydroelectric Dam

Closing the loop of SIEM analysis to Secure Critical Infrastructures

Abstract

Keywords

Cite

Comments

Related papers