Operational analytics as a data monitoring and event management tool of the cyber security management systems

Keywords: cyber se curity event management, data monitoring, Security Information and Event Management (SIEM), stratum theory, Threat Intelligence Platform (TIP)

Abstract

With growing demand for the digitalization of data collection, transmission, processing and storage processes in all life spheres of individual, society, and state, there is an urgent need to construct an infrastructure of information transmission networks which can provide a secure connection between endpoints and data centers. These networks must have high availability and provide the fast and efficient processing of information requests, especially in case of critical infrastructure networks. A structural functional scheme of data management for SIEM systems which includes straight and reverse relations between physical, mathematical and analytical levels is proposed, based on the stratum theory by M. Messarovich. A model of multilevel system for the data monito ring and cyber security event management is built in order to provide a systematic approach to maintain the safety state of complex systems and to ensure mechanisms for the operative real-time cyber security incident response.

References

Stremetska, M. (2019). Priorities Evaluation of Cyber Defense Mechanisms of National Utilities Payment System Through the Use of the Analytic Hierarchy Process. Ukr. Inform. Security Research Journal, 21, No. 2, pp. 129-137 (in Ukrainian). http://doi.org/10.18372/2410-7840.21.13704

Kachynskyi, A. B. (2017). Bezpeka skladnykh system. Kyiv: Yuston. [in Ukrainian]

Volkova, V. N., & Denisov, A. A. (2006). Teoriya sistem. Moscow: Vysshaya shkola. (in Russian).

Kapur, K., & Lamberson, L. (1980). Nadezhnost’ i proektirovanie sistem. Moscow: Mir. (in Russian).

Messarovich, M., Mako, D., & Takahara, I. (1973). Theory of hierarchical multilevel systems. Moscow: Mir. (in Russian).

Sharapov, V. M., Polishchuk, E. S., Koshevoy, N. D., Ishanin, G. G., Minaev, I. G., & Sovlukov, A. S. (2012). Datchiki: spravochnoe posobie. Moscow: Tekhnosfera. (in Russian).

Collins, M. (2014). Network security through data analysis. CA, USA: O’Reilly Media, Inc.

Published
2021-03-23
How to Cite
Kachynskyi, A., & Stremetska, M. (2021). Operational analytics as a data monitoring and event management tool of the cyber security management systems. Reports of the National Academy of Sciences of Ukraine, (1), 9-16. Retrieved from http://ojs.akademperiodyka.org.ua/index.php/dopovidi/article/view/201
Section
Information Science and Cybernetics