Analysis, Trends, and Utilization of Security Information and Event Management (SIEM) in Critical Infrastructures

Security Information and Event Management (SIEM) systems have become essential assets in the realm of cybersecurity. They fulfill a central role in the prevention, detection, and response to cyber threats. Over time, SIEM solutions have matured into comprehensive platforms that offer extensive visibility, enabling organizations to pinpoint high-risk areas and take proactive measures to mitigate potential threats. This proactive approach not only bolsters security but also streamlines incident response, reducing both costs and response times. Recent developments in the field have witnessed the convergence of SIEM systems with big data analytics tools, opening doors to more sophisticated threat detection and response capabilities. This survey delves into the core features of widely adopted SIEM platforms and evaluates the external factors influencing the trajectory of the SIEM landscape over the medium and long term. Furthermore, the study presents a catalog of potential enhancements for the next generation of SIEMs, offering a thorough analysis of their advantages and practical applications within critical infrastructure settings.