{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T08:03:09Z","timestamp":1742976189819,"version":"3.40.3"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031725586"},{"type":"electronic","value":"9783031725593"}],"license":[{"start":{"date-parts":[[2024,11,28]],"date-time":"2024-11-28T00:00:00Z","timestamp":1732752000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,11,28]],"date-time":"2024-11-28T00:00:00Z","timestamp":1732752000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-72559-3_23","type":"book-chapter","created":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T04:25:20Z","timestamp":1732681520000},"page":"339-354","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Discerning Challenges of Security Information and Event Management (SIEM) Systems in Large Organizations"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-9916-7439","authenticated-orcid":false,"given":"Patrick","family":"Shirazi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5286-4850","authenticated-orcid":false,"given":"Ali","family":"Padyab","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,11,28]]},"reference":[{"doi-asserted-by":"crossref","unstructured":"Johnson, A., Dempsey, K., Ross, R., et al.: Guide for security-focused configuration management of information systems. National Institute of Standards and Technology, Gaithersburg, MD (2019)","key":"23_CR1","DOI":"10.6028\/NIST.SP.800-128"},{"doi-asserted-by":"publisher","unstructured":"Sheeraz, M., Paracha, M.A., Haque, M.U., et al.: Effective security monitoring using efficient SIEM architecture. Hum.-Centric Comput. Inf. Sci. 13, 16\u201330 (2023). https:\/\/doi.org\/10.22967\/HCIS.2023.13.023","key":"23_CR2","DOI":"10.22967\/HCIS.2023.13.023"},{"key":"23_CR3","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101817","volume":"94","author":"BD Bryant","year":"2020","unstructured":"Bryant, B.D., Saiedian, H.: Improving SIEM alert metadata aggregation with a novel kill-chain based classification model. Comput. Secur. 94, 101817 (2020). https:\/\/doi.org\/10.1016\/j.cose.2020.101817","journal-title":"Comput. Secur."},{"doi-asserted-by":"crossref","unstructured":"Laue, T., Kleiner, C., Detken, K.-O., Klecker, T.: A SIEM architecture for multidimensional anomaly detection. In: 2021 11th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS), pp. 136\u2013142 (2021)","key":"23_CR4","DOI":"10.1109\/IDAACS53288.2021.9660903"},{"doi-asserted-by":"crossref","unstructured":"Mokalled, H., Catelli, R., Casola, V., et al.: The applicability of a SIEM solution: requirements and evaluation. In: 2019 IEEE 28th International Conference on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), pp. 132\u2013137 (2019)","key":"23_CR5","DOI":"10.1109\/WETICE.2019.00036"},{"doi-asserted-by":"crossref","unstructured":"Leszczyna, R., Wr\u00f3bel, M.R.: Evaluation of open source SIEM for situation awareness platform in the smart grid environment. In: 2015 IEEE World Conference on Factory Communication Systems (WFCS), pp. 1\u20134 (2015)","key":"23_CR6","DOI":"10.1109\/WFCS.2015.7160577"},{"key":"23_CR7","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102165","volume":"103","author":"F Menges","year":"2021","unstructured":"Menges, F., Latzo, T., Vielberth, M., et al.: Towards GDPR-compliant data processing in modern SIEM systems. Comput. Secur. 103, 102165 (2021). https:\/\/doi.org\/10.1016\/j.cose.2020.102165","journal-title":"Comput. Secur."},{"key":"23_CR8","doi-asserted-by":"publisher","first-page":"4759","DOI":"10.3390\/s21144759","volume":"21","author":"G Gonz\u00e1lez-Granadillo","year":"2021","unstructured":"Gonz\u00e1lez-Granadillo, G., Gonz\u00e1lez-Zarzosa, S., Diaz, R.: Security information and event management (SIEM): analysis, trends, and usage in critical infrastructures. Sensors 21, 4759 (2021). https:\/\/doi.org\/10.3390\/s21144759","journal-title":"Sensors"},{"doi-asserted-by":"crossref","unstructured":"Cinque, M., Cotroneo, D., Pecchia, A.: Challenges and directions in Security Information and Event Management (SIEM). In: 2018 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW), pp. 95\u201399 (2018)","key":"23_CR9","DOI":"10.1109\/ISSREW.2018.00-24"},{"key":"23_CR10","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1177\/1473871616629516","volume":"16","author":"JM Borovina Josko","year":"2017","unstructured":"Borovina Josko, J.M., Ferreira, J.E.: Visualization properties for data quality visual assessment: an exploratory case study. Inf. Vis. 16, 93\u2013112 (2017). https:\/\/doi.org\/10.1177\/1473871616629516","journal-title":"Inf. Vis."},{"doi-asserted-by":"crossref","unstructured":"Patel, H., Guttula, S., Mittal, R.S., et al.: Advances in exploratory data analysis, visualisation and quality for data centric AI systems. In: Proceedings of the 28th ACM SIGKDD Conference on Knowledge Discovery and Data Mining. Association for Computing Machinery, New York, NY, USA, pp. 4814\u20134815 (2022)","key":"23_CR11","DOI":"10.1145\/3534678.3542604"},{"unstructured":"Andrienko, G., Andrienko, N., Drucker, S., et al.: Big data visualization and analytics future research challenges and emerging applications","key":"23_CR12"},{"doi-asserted-by":"crossref","unstructured":"Irfan, M., Abbas, H., Iqbal, W.: Feasibility analysis for incorporating\/deploying SIEM for forensics evidence collection in cloud environment. In: 2015 IEEE\/ACIS 14th International Conference on Computer and Information Science (ICIS), pp 15\u201321 (2015)","key":"23_CR13","DOI":"10.1109\/ICIS.2015.7166563"},{"doi-asserted-by":"crossref","unstructured":"Ors\u00f3s, M., Kecsk\u00e9s, M., Kail, E., B\u00e1n\u00e1ti, A.: Log collection and SIEM for 5G SOC. In: 2022 IEEE 20th jubilee world symposium on applied machine intelligence and informatics (SAMI), pp. 000147\u2013000152 (2022)","key":"23_CR14","DOI":"10.1109\/SAMI54271.2022.9780759"},{"doi-asserted-by":"crossref","unstructured":"Kecsk\u00e9s, M.V., Ors\u00f3s, M., Kail, E., B\u00e1n\u00e1ti, A.: Monitoring 5G networks in security operation center. In: 2021 IEEE 21st International Symposium on Computational Intelligence and Informatics (CINTI), pp. 000223\u2013000228 (2021)","key":"23_CR15","DOI":"10.1109\/CINTI53070.2021.9668469"},{"unstructured":"Chandran, S., McHugh, J., Ou, X.: Turning contradictions into innovations or: how we learned to stop whining and improve security operations","key":"23_CR16"},{"doi-asserted-by":"crossref","unstructured":"\u00d6zdemir S\u00f6nmez, F., G\u00fcnel, B.: Evaluation of security information and event management systems for custom security visualization generation. In: 2018 International Congress on Big Data, Deep Learning and Fighting Cyber Terrorism (IBIGDELFT), pp. 38\u201344 (2018)","key":"23_CR17","DOI":"10.1109\/IBIGDELFT.2018.8625291"},{"unstructured":"Kothari, C.R.: Research Methodology: Methods and Techniques. New Age International (2004)","key":"23_CR18"},{"doi-asserted-by":"publisher","unstructured":"Vernon, W.: The Delphi technique: a review. Int. J. Ther. Rehabil. 16, 69\u201376 (2009). https:\/\/doi.org\/10.12968\/ijtr.2009.16.2.38892","key":"23_CR19","DOI":"10.12968\/ijtr.2009.16.2.38892"},{"doi-asserted-by":"publisher","unstructured":"Avella, J.R.: Delphi panels: research design, procedures, advantages, and challenges. Int. J. Dr. Stud. 11, 305\u2013321 (2016). https:\/\/doi.org\/10.28945\/3561","key":"23_CR20","DOI":"10.28945\/3561"},{"key":"23_CR21","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1016\/j.im.2003.11.002","volume":"42","author":"C Okoli","year":"2004","unstructured":"Okoli, C., Pawlowski, S.D.: The Delphi method as a research tool: an example, design considerations and applications. Inf. Manage. 42, 15\u201329 (2004). https:\/\/doi.org\/10.1016\/j.im.2003.11.002","journal-title":"Inf. Manage."},{"key":"23_CR22","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1146\/annurev.soc.22.1.129","volume":"22","author":"DL Morgan","year":"1996","unstructured":"Morgan, D.L.: Focus groups. Annu. Rev. Sociol. 22, 129\u2013152 (1996). https:\/\/doi.org\/10.1146\/annurev.soc.22.1.129","journal-title":"Annu. Rev. Sociol."},{"doi-asserted-by":"publisher","unstructured":"Grobler, M., Gaire, R., Nepal, S.: User, usage and usability: redefining human centric cyber security. Front Big Data 4 (2021) https:\/\/doi.org\/10.3389\/fdata.2021.583723","key":"23_CR23","DOI":"10.3389\/fdata.2021.583723"},{"key":"23_CR24","first-page":"133","volume":"1","author":"AJ Bingham","year":"2021","unstructured":"Bingham, A.J., Witkowsky, P.: Deductive and inductive approaches to qualitative data analysis. Anal. Interpret. Qual. Data Int. 1, 133\u2013146 (2021)","journal-title":"Anal. Interpret. Qual. Data Int."},{"key":"23_CR25","doi-asserted-by":"publisher","first-page":"400","DOI":"10.3390\/electronics11030400","volume":"11","author":"R Dama\u0161evi\u010dius","year":"2022","unstructured":"Dama\u0161evi\u010dius, R., Zailskait\u0117-Jak\u0161t\u0117, L.: Usability and security testing of online links: a framework for click-through rate prediction using deep learning. Electronics 11, 400 (2022). https:\/\/doi.org\/10.3390\/electronics11030400","journal-title":"Electronics"}],"container-title":["IFIP Advances in Information and Communication Technology","Human Aspects of Information Security and Assurance"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-72559-3_23","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T05:07:47Z","timestamp":1732684067000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-72559-3_23"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,28]]},"ISBN":["9783031725586","9783031725593"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-72559-3_23","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"type":"print","value":"1868-4238"},{"type":"electronic","value":"1868-422X"}],"subject":[],"published":{"date-parts":[[2024,11,28]]},"assertion":[{"value":"28 November 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"HAISA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Human Aspects of Information Security and Assurance","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Sk\u00f6vde","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Sweden","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 July 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 July 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"haisa2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.haisa.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}