IMPLEMENTATION OF THE ARTIFICIAL IMMUNE SYSTEM ALGORITHM FOR SECURITY INFORMATION AND EVENT MANAGEMENT SYSTEMS

2023

Closed access Metadata (CSL-JSON)
DOI 10.51889/2959-5894.2023.83.3.020
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

One of the most widely used technologies in computer and network security is Security Information and Event Management (SIEM) systems. A SIEM system is a tool that collects logs from all software and hardware connected to the network, detects security violations using these logs, and generates alarm notifications. During operation, SIEM systems produce numerous alerts. This abundance of alerts, along with their accuracy, poses a significant challenge. In this paper, we implement the Artificial Immune System (AIS) algorithm to generate more stable alerts and increase the verification rates of alerts produced by SIEM systems. The results demonstrate that the adaptation of the AIS algorithm to SIEM systems is successful. When SIEM systems powered by AIS were applied, we achieved more successful results compared to traditional SIEM systems.