Istraživanje mogućnosti SIEM sustava i interoperabilnosti s alatima za zaštitu informacijsko-komunikacijskog sustava

master's thesis

• Title (english): Research on the Capabilities of SIEM Systems and Interoperability with Tools for Information and Communication System Protection
• Author: Kristijan Tomas
• Mentor: Ivan Cvitić (mentor)
• Committee member: Dragan Peraković (predsjednik povjerenstva)
• Committee member: Petra Teskera (član povjerenstva)
• Committee member: Marko Periša (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2024-09-27, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Sustavi za upravljanje sigurnosnim informacijama i događajima (engl. Security Information and
Event Management, SIEM) postali su ključni dio moderne kibernetičke sigurnosne arhitekture.
Omogućuju organizacijama prikupljanje, analizu i korelaciju sigurnosnih podataka iz više
izvora, pružajući sveobuhvatan pregled njihove sigurnosne situacije. Međutim, učinkovitost
SIEM-a često je ograničena ukoliko djeluje samostalno. Integracija SIEM sustava s drugim
alatima za zaštitu informacijsko-komunikacijskog sustava, poput vatrozida (engl. Firewall),
značajno povećava učinkovitost SIEM sustava i kibernetičku sigurnost organizacije. Iako
postoje razni izazovi prilikom integracije, takva rješenja donose mnoge prednosti i dodatan
sloj zaštite, što je u današnjem dobu sve sofisticiranijih napada itekako potrebno. Ovaj rad
istražuje mogućnosti integracije SIEM-a s drugim sigurnosnim alatima, raspravlja o izazovima
integracije različitih sigurnosnih arhitektura i pruža primjere uspješnih integracija SIEM-a u
stvarnom svijetu.

Abstract (english)

Security Information and Event Management (SIEM) systems have become a critical
component of modern cybersecurity architecture. They enable organizations to collect,
analyze, and correlate security data from multiple sources, providing a comprehensive view
of their security posture. However, the effectiveness of SIEM is often limited when it operates
in isolation. Integrating SIEM systems with other information and communication system
protection tools, such as firewalls, significantly enhances the efficiency of SIEM systems and
the cybersecurity of an organization. Although there are various challenges associated with
integration, such solutions offer many advantages and an additional layer of protection, which
is crucial in today's era of increasingly sophisticated attacks. This paper explores the
possibilities of integrating SIEM with other security tools, discusses the challenges of
integrating different security architectures, and provides examples of successful SIEM
integrations in the real world.

• Keywords: SIEM; kibernetička sigurnost; integracija i interoperabilnost
• Keywords (english): SIEM; cybersecurity; integration and interoperability
• Language: croatian
• URN:NBN: urn:nbn:hr:119:528977
• Study programme: Title: Transport; specializations in: Road Transport, Rail Transport, Water Transport, Air Transport, Postal Transport, Information and Communication Traffic, Urban Transport; Course: Road Transport; Study programme type: university; Study level: graduate; Academic / professional title: sveučilišni/a magistar/magistra inženjer/inženjerka prometa (sveučilišni/a magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2024-11-29 14:41:19