{"id":"https://openalex.org/W4393099527","doi":"https://doi.org/10.1109/dese60595.2023.10469387","title":"Detect and Mitigate Cyberattacks Using SIEM","display_name":"Detect and Mitigate Cyberattacks Using SIEM","publication_year":2023,"publication_date":"2023-12-18","ids":{"openalex":"https://openalex.org/W4393099527","doi":"https://doi.org/10.1109/dese60595.2023.10469387"},"language":"en","primary_location":{"id":"doi:10.1109/dese60595.2023.10469387","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/dese60595.2023.10469387","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 16th International Conference on Developments in eSystems Engineering (DeSE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041421076","display_name":"Zeyad Safaa Younus","orcid":"https://orcid.org/0000-0002-6818-1392"},"institutions":[{"id":"https://openalex.org/I12150220","display_name":"University of Mosul","ror":"https://ror.org/039cf4q47","country_code":"IQ","type":"education","lineage":["https://openalex.org/I12150220"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Zeyad Safaa Younus","raw_affiliation_strings":["Univ. of Mosul,College of Computer Science and Mathematics,Dept. of Software,Mosul,Iraq","Dept. of Software, College of Computer Science and Mathematics, Univ. of Mosul, Mosul, Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ. of Mosul,College of Computer Science and Mathematics,Dept. of Software,Mosul,Iraq","institution_ids":["https://openalex.org/I12150220"]},{"raw_affiliation_string":"Dept. of Software, College of Computer Science and Mathematics, Univ. of Mosul, Mosul, Iraq","institution_ids":["https://openalex.org/I12150220"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054254598","display_name":"Mafaz Alanezi","orcid":"https://orcid.org/0000-0003-4213-9193"},"institutions":[{"id":"https://openalex.org/I12150220","display_name":"University of Mosul","ror":"https://ror.org/039cf4q47","country_code":"IQ","type":"education","lineage":["https://openalex.org/I12150220"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Mafaz Alanezi","raw_affiliation_strings":["Univ. of Mosul,College of Computer Science and Mathematics,Dept. of Computer Science,Mosul,Iraq","Dept. of Computer Science, College of Computer Science and Mathematics, Univ. of Mosul, Mosul, Iraq","ICT Research Unit, Computer Center, Univ. of Mosul, Mosul, Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ. of Mosul,College of Computer Science and Mathematics,Dept. of Computer Science,Mosul,Iraq","institution_ids":["https://openalex.org/I12150220"]},{"raw_affiliation_string":"Dept. of Computer Science, College of Computer Science and Mathematics, Univ. of Mosul, Mosul, Iraq","institution_ids":["https://openalex.org/I12150220"]},{"raw_affiliation_string":"ICT Research Unit, Computer Center, Univ. of Mosul, Mosul, Iraq","institution_ids":["https://openalex.org/I12150220"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I12150220"],"apc_list":null,"apc_paid":null,"fwci":2.9296,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.92663173,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"510","last_page":"515"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11609","display_name":"Geophysical Methods and Applications","score":0.8330000042915344,"subfield":{"id":"https://openalex.org/subfields/2212","display_name":"Ocean Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11609","display_name":"Geophysical Methods and Applications","score":0.8330000042915344,"subfield":{"id":"https://openalex.org/subfields/2212","display_name":"Ocean Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11038","display_name":"Advanced SAR Imaging Techniques","score":0.8216999769210815,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12740","display_name":"Gait Recognition and Analysis","score":0.803600013256073,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5317956805229187},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5293030738830566},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.4447157382965088},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.2772805094718933}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5317956805229187},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5293030738830566},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.4447157382965088},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2772805094718933}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dese60595.2023.10469387","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/dese60595.2023.10469387","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 16th International Conference on Developments in eSystems Engineering (DeSE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320317084","display_name":"Ministry of Higher Education and Scientific Research","ror":"https://ror.org/00k4cwq24"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W2026372785","https://openalex.org/W2154220950","https://openalex.org/W2183114898","https://openalex.org/W2189480795","https://openalex.org/W2485307462","https://openalex.org/W2565214083","https://openalex.org/W2797989522","https://openalex.org/W2799811901","https://openalex.org/W2804937556","https://openalex.org/W2808554021","https://openalex.org/W2900220361","https://openalex.org/W2902121396","https://openalex.org/W2946445608","https://openalex.org/W2979323854","https://openalex.org/W2989853335","https://openalex.org/W2996075217","https://openalex.org/W3031062182","https://openalex.org/W3137150608","https://openalex.org/W3153738065","https://openalex.org/W3168771234","https://openalex.org/W3179198361","https://openalex.org/W3208573928","https://openalex.org/W3215461890","https://openalex.org/W4281616568","https://openalex.org/W4281727634","https://openalex.org/W4307275119","https://openalex.org/W4313396811","https://openalex.org/W4313428100","https://openalex.org/W4315782929","https://openalex.org/W4388484667","https://openalex.org/W4404298047","https://openalex.org/W6687181877","https://openalex.org/W6771790286"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4389157351","https://openalex.org/W4232561318","https://openalex.org/W4253977752","https://openalex.org/W3120595989","https://openalex.org/W2964829536","https://openalex.org/W2962911305","https://openalex.org/W4224941017"],"abstract_inverted_index":{"Cybersecurity":[0],"is":[1,69,158,178,203],"crucial":[2],"to":[3,39,71,83,100,133,147,160,163],"protect":[4],"network":[5,36,45,67,122,136],"resources":[6],"and":[7,18,26,30,43,52,60,73,96,104,106,120,128,153,191,207],"reduce":[8],"the":[9,135,139,148,175],"risk":[10],"of":[11,15,169,174,183],"cyberattacks":[12],"like":[13,23],"denial":[14],"service":[16],"(DOS)":[17],"file":[19,108,115],"modification.":[20],"Security":[21],"tools":[22,130,185],"intrusion":[24],"detection":[25,51,103,168],"prevention":[27,53],"systems":[28],"(IDS":[29],"IPS),":[31],"which":[32,64],"work":[33],"independently":[34],"on":[35,79,138],"endpoints,":[37],"struggle":[38],"distinguish":[40],"between":[41],"normal":[42],"anomalous":[44],"traffic":[46,137],"in":[47,81,86,189,205],"real-time,":[48],"making":[49],"cyberattack":[50],"challenging.":[54],"As":[55],"a":[56,92,181],"result,":[57],"security":[58],"information":[59],"event":[61],"management":[62],"(SIEM),":[63],"offers":[65],"centralized":[66],"management,":[68],"utilized":[70],"gather":[72],"analyze":[74],"logs":[75,144],"from":[76],"various":[77],"endpoints":[78],"networks":[80],"order":[82],"identify":[84],"threats":[85],"real":[87],"time.":[88],"This":[89],"paper":[90],"introduces":[91],"method":[93,177,202],"integrating":[94],"Wazuh":[95,107,118,149,157],"IDS":[97],"tool":[98],"capabilities":[99,112],"improve":[101],"DOS":[102,184],"mitigation,":[105],"integrity":[109],"monitoring":[110],"(FIM)":[111],"for":[113,151],"real-time":[114,190],"modification":[116],"detection.":[117],"monitors":[119],"evaluates":[121],"resource":[123],"status":[124],"centrally,":[125],"while":[126],"Snort":[127],"Suricata":[129],"are":[131,145,187],"used":[132,159],"monitor":[134],"monitored":[140],"endpoint.":[141],"After":[142],"that,":[143],"sent":[146],"server":[150],"analysis":[152],"alerting.":[154],"In":[155],"addition,":[156],"detect":[161],"modifications":[162],"critical":[164],"files,":[165],"enabling":[166],"early":[167],"malicious":[170],"changes.":[171],"The":[172,196],"effectiveness":[173],"suggested":[176],"tested":[179],"using":[180],"variety":[182],"that":[186,200],"produced":[188],"by":[192],"modifying":[193],"important":[194],"files.":[195],"experimental":[197],"findings":[198],"demonstrate":[199],"our":[201],"effective":[204],"detecting":[206],"mitigating":[208],"cyberattacks.":[209]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}