Security Operating Center on Campus
Lubica Zidekova, Pavel Segeč, Jana Uramová, Marek Moravčík · 2024
With the growing threat of cyberattacks, it is essential to ensure security even in academic environments, as these spaces bring together various groups of users, not only students but also scientific and pedagogical staff, non-teaching staff, and third parties who process sensitive research data or use critical infrastructure on a daily basis. This paper addresses the deployment of a Security Operations Center (SOC) at the Department of Information Networks of the Faculty of Management and Informatics at the University of Žilina (KIS FRI UNIZA), whichˇ serves to monitor and protect the academic environment. The goal of the SOC is to detect, analyze, and respond to security incidents in real time, with an emphasis on protecting critical systems and sensitive data. The deployment of SOC in the academic environment, with the involvement of students, allows them to gain practical experience in cybersecurity while ensuring the protection of the faculty's IT infrastructure. This approach combines theoretical knowledge with practical application, creating an effective model for education in information and cybersecurity and defense against cyberattacks. The paper outlines the basic concept of the SOC, the cycle of activities carried out within the SOC, the technological tools chosen for data monitoring and analysis, as well as the personnel composition of the SOC team.