{"id":"https://openalex.org/W7225399736","doi":"https://doi.org/10.5281/zenodo.24023706","title":"A Hybrid SIEM/SOAR Platform for Integrated Physical and Cyber Security Monitoring in Logistics Environments with Offensive Vulnerability Assessment","display_name":"A Hybrid SIEM/SOAR Platform for Integrated Physical and Cyber Security Monitoring in Logistics Environments with Offensive Vulnerability Assessment","publication_year":2026,"publication_date":"2026-11-06","ids":{"openalex":"https://openalex.org/W7225399736","doi":"https://doi.org/10.5281/zenodo.24023706"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24023706","doi":"https://doi.org/10.5281/zenodo.24023706","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24023706","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24023706","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128026270","display_name":"Panagiotis Beligiannis","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I231025917","display_name":"Hellenic Open University","ror":"https://ror.org/02kq26x23","country_code":"GR","type":"education","lineage":["https://openalex.org/I231025917"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Beligiannis, Panagiotis","raw_affiliation_strings":["Hellenic Open University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hellenic Open University","institution_ids":["https://openalex.org/I231025917"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5128026270"],"corresponding_institution_ids":["https://openalex.org/I231025917"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0010000000474974513,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13983","display_name":"Cybersecurity and Information Systems","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"security information and event management","score":0.6650000214576721},{"id":"https://openalex.org/keywords/soar","display_name":"SOAR","score":0.8690000176429749},{"id":"https://openalex.org/keywords/cybersecurity-monitoring","display_name":"cybersecurity monitoring","score":0.8619999885559082},{"id":"https://openalex.org/keywords/logistics-security","display_name":"logistics security","score":0.871999979019165},{"id":"https://openalex.org/keywords/industrial-internet-of-things","display_name":"Industrial Internet of Things","score":0.9810000061988831},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.6700000166893005},{"id":"https://openalex.org/keywords/tamper-detection","display_name":"tamper detection","score":0.9179999828338623},{"id":"https://openalex.org/keywords/predictive-maintenance","display_name":"predictive maintenance","score":0.8930000066757202},{"id":"https://openalex.org/keywords/attack-detection","display_name":"attack detection","score":0.5989999771118164},{"id":"https://openalex.org/keywords/port-scanning","display_name":"port scanning","score":0.5989999771118164},{"id":"https://openalex.org/keywords/brute-force-attacks","display_name":"brute force attacks","score":0.8830000162124634},{"id":"https://openalex.org/keywords/scalability","display_name":"scalability","score":0.39399999380111694}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6001999974250793},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5698999762535095},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.5151000022888184},{"id":"https://openalex.org/C176856949","wikidata":"https://www.wikidata.org/wiki/Q2001676","display_name":"Offensive","level":2,"score":0.45820000767707825},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4544000029563904},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4392000138759613},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4178999960422516},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.414900004863739},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.4059999883174896},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.40459999442100525},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.39079999923706055},{"id":"https://openalex.org/C2776157020","wikidata":"https://www.wikidata.org/wiki/Q851598","display_name":"Physical security","level":2,"score":0.38690000772476196},{"id":"https://openalex.org/C183121708","wikidata":"https://www.wikidata.org/wiki/Q209867","display_name":"Telemetry","level":2,"score":0.3815999925136566},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.351500004529953},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.3393000066280365},{"id":"https://openalex.org/C180591934","wikidata":"https://www.wikidata.org/wiki/Q1253369","display_name":"Downtime","level":2,"score":0.335099995136261},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.2955999970436096},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.2953999936580658},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2874000072479248},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.2851000130176544},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.28130000829696655},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2806999981403351},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.27889999747276306},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.26809999346733093},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2558000087738037},{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.24023706","doi":"https://doi.org/10.5281/zenodo.24023706","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24023706","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},{"id":"doi:10.5281/zenodo.24023707","doi":"https://doi.org/10.5281/zenodo.24023707","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24023707","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24023706","doi":"https://doi.org/10.5281/zenodo.24023706","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24023706","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[{"score":1.0,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7217448352","https://openalex.org/W7161587493","https://openalex.org/W2391535118","https://openalex.org/W6967694116","https://openalex.org/W4389203119","https://openalex.org/W4293637494","https://openalex.org/W7223887211","https://openalex.org/W7138295391","https://openalex.org/W4402157527","https://openalex.org/W4409339711"],"abstract_inverted_index":{"The":[0,73,101,151,196],"digital":[1],"transformation":[2],"of":[3,9,50,176,182],"logistics":[4,71,222],"operations":[5],"through":[6,108,128],"Industrial":[7],"Internet":[8],"Things":[10],"(IIoT)":[11],"technologies":[12],"has":[13],"introduced":[14],"unprecedented":[15],"complexity":[16],"in":[17],"security":[18,94,116,215,223],"monitoring.":[19],"Traditional":[20],"approaches":[21],"treat":[22],"physical":[23,115],"security,":[24],"cybersecurity,":[25],"and":[26,39,47,56,60,64,89,111,121,124,179,212],"equipment":[27,129],"maintenance":[28,127],"as":[29],"separate":[30],"domains,":[31],"creating":[32],"silos":[33],"that":[34],"hinder":[35],"comprehensive":[36],"threat":[37],"detection":[38,110,120,156,174],"response.":[40],"This":[41],"paper":[42],"presents":[43],"the":[44,200],"design,":[45],"implementation,":[46,216],"experimental":[48],"evaluation":[49,133],"HybLogSec,":[51],"a":[52,218],"hybrid":[53],"Security":[54,61],"Information":[55],"Event":[57],"Management":[58],"(SIEM)":[59],"Orchestration,":[62],"Automation,":[63],"Response":[65],"(SOAR)":[66],"platform":[67,102,197],"specifically":[68],"designed":[69],"for":[70,221],"environments.":[72],"proposed":[74],"system":[75,152],"integrates":[76],"real-time":[77],"telemetry":[78,130],"monitoring":[79,117],"from":[80],"310":[81],"heterogeneous":[82],"devices":[83],"(cameras,":[84],"drones,":[85],"robots,":[86],"environmental":[87,122],"sensors,":[88],"PLCs)":[90],"with":[91,144,158,172],"automated":[92],"offensive":[93],"scanning":[95],"using":[96],"containerized":[97],"tools":[98],"(nmap,":[99],"nuclei).":[100],"simultaneously":[103],"addresses:":[104],"(1)":[105],"cybersecurity":[106],"threats":[107],"anomaly":[109],"vulnerability":[112],"assessment,":[113],"(2)":[114],"including":[118],"tampering":[119],"anomalies,":[123],"(3)":[125],"predictive":[126],"analysis.":[131],"Experimental":[132],"demonstrates":[134],"linear":[135],"scalability":[136],"up":[137],"to":[138],"62":[139],"agents":[140],"(throughput":[141],"11.88":[142],"msg/sec)":[143],"gradual":[145],"resource":[146],"saturation":[147],"beyond":[148],"100":[149],"agents.":[150],"achieves":[153],"100%":[154],"attack":[155,164],"rate":[157],"zero":[159],"false":[160],"positives":[161],"across":[162],"three":[163],"scenarios":[165],"(Port":[166],"Scanning,":[167],"Brute":[168],"Force,":[169],"Telemetry":[170],"Flood),":[171],"mean":[173],"time":[175],"11.6":[177],"seconds":[178],"ROC":[180],"AUC":[181],"0.98.":[183],"Statistical":[184],"analysis":[185],"(ANOVA)":[186],"confirms":[187],"significant":[188],"workload":[189],"impact":[190],"on":[191],"performance":[192,204],"(p":[193],"<":[194],"0.001).":[195],"successfully":[198],"bridges":[199],"gap":[201],"between":[202],"theoretical":[203],"modeling":[205],"(M/M/1":[206],"queueing":[207],"theory,":[208],"R2":[209],"=":[210],"0.97)":[211],"practical":[213],"industrial":[214],"providing":[217],"unified":[219],"framework":[220],"operations.":[224]},"counts_by_year":[],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2026-11-07T00:00:00"}