In the era of digital transformation and the ever-evolving threat landscape, Security Operations Centres (SOCs) play a pivotal role in safeguarding organizations against cyberattacks and ensuring data integrity. The management and security of logs generated by various systems and devices are critical aspects of SOC operations. Traditional log management systems, however, face challenges related to data tampering, trust, and transparency. This work aims to evaluate the application of Blockchain technology in one of the operational processes (Security Operations) of companies that provide services in information security. We intend to understand the advantages and challenges of adopting this technology and how it can be a solution to take into account in order to optimize the services provided by these companies, or even give rise to new services.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Application of Blockchain Technology in the Context of a Security Operations Centre (SOC) Log Management

  • Carlos Tomaz,
  • Inês Marques,
  • Lina Galheto,
  • Joel Curado,
  • Joao C. Ferreira

摘要

In the era of digital transformation and the ever-evolving threat landscape, Security Operations Centres (SOCs) play a pivotal role in safeguarding organizations against cyberattacks and ensuring data integrity. The management and security of logs generated by various systems and devices are critical aspects of SOC operations. Traditional log management systems, however, face challenges related to data tampering, trust, and transparency. This work aims to evaluate the application of Blockchain technology in one of the operational processes (Security Operations) of companies that provide services in information security. We intend to understand the advantages and challenges of adopting this technology and how it can be a solution to take into account in order to optimize the services provided by these companies, or even give rise to new services.