Implementation and management of security information and event management tools in information systems through the MSSP model

Abstract

This paper presents a solution which can be applicable to most small and medium companies hav- ing to deal with cyber threats and a lack of staff who would be in charge of the safe management of the infrastructure, whilst also delivering with acceptable costs. The aim of this paper is to create the general initial architecture of a SIEM solution, with the goal of positioning it as a MSSP system for the centralised collection and analysis of system records collected from various forms. Through a general overview of the solution, which comprehends a detailed analysis of connecting components, the man- agement of security information and events tools in information systems is shown as a MSSP model. Additionally, the advantages and disadvantages related to the suggested solution are given.