Cybersecurity on a budget: Evaluating security and performance of open-source SIEM solutions for SMEs

Area of Science:

• Cybersecurity
• Information Security
• Network Security

Background:

• Small and Medium Enterprises (SMEs) face increasing cyber threats with limited resources.
• Traditional proprietary Security Information and Event Management (SIEM) systems can be costly for SMEs.
• Open-source SIEM solutions present a viable, accessible alternative for enhancing SME cybersecurity.

Purpose of the Study:

• To comprehensively evaluate the security and performance of open-source SIEM systems.
• To assess the suitability of open-source SIEMs for addressing contemporary cyber threats and regulatory compliance in SMEs.
• To provide empirical data on the capabilities of open-source SIEM solutions for enterprise-grade SME networks.

Main Methods:

• Empirical testing of open-source SIEM systems within simulated enterprise-grade SME network environments.
• Performance evaluation focusing on resource utilization and real-time data processing.
• Assessment of security features against modern cyber threats and compliance requirements.

Main Results:

• Open-source SIEM systems demonstrate significant potential in bolstering SME cybersecurity defenses.
• Empirical testing provided insights into resource utilization and real-time data processing efficiency.
• The study identified specific strengths and limitations of various open-source SIEM solutions.

Conclusions:

• Open-source SIEM systems are effective and economical tools for SMEs to improve their security posture.
• Findings assist cybersecurity practitioners and organizations in selecting appropriate SIEM solutions.
• This research contributes valuable data for the academic community and decision-makers in cybersecurity.