“SOCaaS-IoT” A Security Operations Center as a Service Approach for IoT Applications Using Open-Source SIEM
Bilel Arfaoui, Hichem Mrabet, Abderrazak Jemai · 2023
In many cases, it is imperative to use secure and trustworthy IoT networks. In the field of cybersecurity, using Security Operations Centers (SoCs) is seen to be a novel way to reduce the increasing quantity, complexity, and sophistication of assaults. This is where the service-oriented design of SoC design methodology is useful. This is where the SoC approach as a service comes into play. In order to stop cyberattacks, defend against them, and enhance secure IoT applications, the article examines Security Information and Event Management (SIEM), SoC, and cloud principles in information and IoT network systems security. The paper makes three contributions: Firstly, we go over current strategies for protecting IoT in real-world scenarios and outlining the many benefits and drawbacks of these solutions. Next, we employ diverse cybersecurity risks on an Internet of Things network system to ascertain how the Security Operations Center as a Service (SOCaaS) may provide comprehensive security functionalities. Among these skills are prevention and detection of the threat. Lastly, we go over suggestions for enhancing security controls and the “SOCaaS” strategy for safe deployments. Our findings indicate that the “SOCaaS” technique might be used to detect cybersecurity risks in safe Internet of things applications.