Högskolan i Skövde

his.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • apa-cv
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Discerning Challenges of Security Information and Event Management (SIEM) Systems in Large Organizations
University of Skövde, School of Informatics. University of Skövde, Informatics Research Environment. (Information Systems)ORCID iD: 0009-0008-9916-7439
University of Skövde, Informatics Research Environment. University of Skövde, School of Informatics. (Information Systems)ORCID iD: 0000-0002-5286-4850
2025 (English)In: Human Aspects of Information Security and Assurance: 18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024, Proceedings, Part I / [ed] Clarke, Nathan; Furnell, Steven, Cham: Springer, 2025, p. 339-354Conference paper, Published paper (Refereed)
Abstract [en]

Security Information and Event Management (SIEM) systems are essential for security experts in various daily tasks such as monitoring, anomaly detection, forensics, identifying indicators of compromises, threat hunting, and incident handling. Although many different SIEM systems are being used in large organizations, there needs to be more understanding of the existing challenges of SIEM systems from a human-centric cybersecurity perspective. The present study explores those challenges following a qualitative research approach utilizing the Delphi technique. Two rounds of interviews were conducted with twelve security experts in multiple large organizations. The experts expressed the challenges in the first round, exploring various components of user, usage, and usability of SIEM systems. Then, the challenges were divided into thirteen main categories based on the consensus level. In the second round, the experts validated and ranked the categories. Results show that the most significant challenges are related to usage, followed by usability and user components.

Place, publisher, year, edition, pages
Cham: Springer, 2025. p. 339-354
Series
IFIP Advances in Information and Communication Technology, ISSN 1868-4238, E-ISSN 1868-422X ; 721
Keywords [en]
Security Information and Event Management, Cybersecurity dashboard, Delphi technique, SIEM Challenges, Human-centric Cybersecurity
National Category
Information Systems, Social aspects
Research subject
Information Systems
Identifiers
URN: urn:nbn:se:his:diva-24792DOI: 10.1007/978-3-031-72559-3_23Scopus ID: 2-s2.0-85211338488ISBN: 978-3-031-72558-6 (print)ISBN: 978-3-031-72561-6 (print)ISBN: 978-3-031-72559-3 (electronic)OAI: oai:DiVA.org:his-24792DiVA, id: diva2:1922311
Conference
18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024
Available from: 2024-12-18 Created: 2024-12-18 Last updated: 2025-09-29Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Shirazi, PatrickPadyab, Ali

Search in DiVA

By author/editor
Shirazi, PatrickPadyab, Ali
By organisation
School of InformaticsInformatics Research Environment
Information Systems, Social aspects

Search outside of DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetric score

doi
isbn
urn-nbn
Total: 1097 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • apa-cv
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf