Matching Between SIEM Tools and Smart DLC Systems

Abstract

Nowadays, cybersecurity data management has become a challenging issue especially with the emergence of Big Data. This paper introduces the System of Systems (SoS) paradigm to design a new generation SIEM POC (Security Information Event Management Proof Of Concept) made up of an open source Big Data platform ELK and integrated with other open source security and load-balancing tools. To do this, we first focused on the Big Data and Smart Data requirements to model a data lifecycle from the literature named Smart DLC to the System of 7 Systems, So7S. Second, we used the proposed cycle as SoS tools design, implement and test the proposed SIEM POC by matching the cybersecurity tools to each system of the SoS modeled. The proposed open source SIEM is operational and meets all cybersecurity monitoring requirements with challenging results and may interest small and medium-sized companies dealing with cybersecurity issues.