Security and Reliability Requirements for Advanced Security Event Management

Roland Rieke (1) , Luigi Coppolino (2) , Andrew Hutchinson (3) , Elsa Prieto (4) , Chrystel Gaber (5)

1 Fraunhofer SIT - Fraunhofer Institute for Secure Information Technology [Darmstadt]
2 Epsilon SRL
3 T-Systems International GmbH
4 ATOS [madrid]
5 Orange Labs [Caen]

This paper addresses security information management in complex application scenarios. Security Information and Event Management (SIEM) systems collect and examine security related events, with the goal of providing a unified view of the monitored systems' security status. While various SIEMs are in production, there is scope to extend the capability and resilience of these systems. The use of SIEM technology in four disparate scenario areas is used in this paper as a catalyst for the development and articulation of Security and Reliability requirements for advanced security event management. The scenarios relate to infrastructure management for a large real-time sporting event, a mobile money payment system, a managed services environment and a cyber-physical dam control system. The diversity of the scenarios enables elaboration of a comprehensive set of Security and Reliability requirements which can be used in the development of future SIEM systems.

Mots clés: security requirements; security information and event management; SIEM; architecting trustworthy systems

Domaines: Cryptographie et sécurité [cs.CR]

Roland Rieke, Luigi Coppolino, Andrew Hutchinson, Elsa Prieto, Chrystel Gaber. Security and Reliability Requirements for Advanced Security Event Management. Mathematical Methods, Models, and Architectures for Computer Network Security, 2012, Saint Peterbourg, Russia. 10 p. ⟨hal-01004062⟩