TIM-8315 v2

SIEM Use Cases. (2021). Playbooks. https://www.siemusecases.com/soc/playbooks
SIEM Playbooks are a methodology tailored to organizational needs to prepare for cyberattacks. This article lists several cases of cybersecurity response playbooks.

Zacharis, A., & Patsakis, C. (2023). AiCEF: An AI-assisted cyber exercise content generation framework using named entity recognition. International Journal of Information Security, 22(5), 1333–1354. https://doi.org/10.1007/s10207-023-00693-z
This article’s main objective was automating the generation of structured Cybersecurity Exercises (CSE) scenarios based on a pool of unstructured information with little experience in scenario building expected from the Exercise Planner (EP).

IBM. (2023, June 23). What is security information and event management (SIEM)? https://www.ibm.com/topics/siem
https://www.ibm.com/topics/siem
IBM provides a brief description of SIEM and its use to help organizations’ security teams detect user behavior anomalies. The use of SIEM solutions is discussed and its benefits. SIEM’s implementation best practices is briefly presented.

Microsoft. (2024). What Is SIEM? https://www.microsoft.com/en-us/security/business/security-101/what-is-siem
Microsoft discusses how SIEM tools are used in helping security teams define threats and develop data protection strategies. Capabilities, use cases, benefits, and implementation of best practices are described.

Mohamed, N. (2023). Current trends in AI and ML for cybersecurity: A state-of-the-art survey. Cogent Engineering, 10(2), 1–30. https://doi.org/10.1080/23311916.2023.2272358
This paper provides a comprehensive survey of the state-of-the-art use of Artificial Intelligence (AI) and Machine Learning (ML) in cybersecurity. The paper illuminates key applications of AI and ML in cybersecurity, while also addressing existing challenges and posing unresolved questions for future research. The paper also emphasizes the ethical and legal implications associated with their implementation.

Dark Reading. (2024). Cyberattacks & data reaches recent news. Dark Reading. https://www.darkreading.com/cyberattacks-data-breaches
A collection of articles about data breaches and how organizations reacted to or recovered the targeted data.

González-Granadillo, G., González-Zarzosa, S., & Diaz, R. (2021). Security information and event management (SIEM): Analysis, trends, and usage in critical infrastructures. Sensors (Basel, Switzerland), 21(14). https://doi.org/10.3390/s21144759
A list of potential enhancements for the next generation of SIEMs is provided as part of the review of existing solutions and an analysis on their benefits and usage in critical infrastructures.

López Velásquez, J. M., Martínez Monterrubio, S. M., Sánchez Crespo, L. E., & Garcia Rosado, D. (2023). Systematic review of SIEM technology: SIEM-SC birth. International Journal of Information Security, 22(3), 691–711. https://doi.org/10.1007/s10207-022-00657-9
This paper contains a systematic review carried out to address the status of the System Information and Event Management (SIEM) technology and what may be its future steps.

Măcăneață, C. (2024). Overview of security information and event management systems. Informatica Economica, 28(1), 15–24.
Organizations face continuous risks of cybersecurity breaches and malicious activities. Reviewing logs is a critical activity to identify these threats, but the large volume of systems and data often presents an insurmountable challenge. As IT infrastructures expand, logs multiply exponentially, making the traditional manual log analysis extremely difficult and prone to missing key events. This paper presents an overview of SIEM systems and highlights how they can overcome these issues.

International Association of Privacy Professionals. (2024). Artificial intelligence. https://iapp.org/resources/topics/artificial-intelligence-1/
The future of AI is discussed through several options: resources, options (Generative AI), Machine Learning, and regulation-legislation-enforcement guidelines.

Techtarget. (2024). Enterprise AI information, news and tips from TechTarget. https://www.techtarget.com/searchenterpriseai/
AI business strategies, infrastructure, technologies, and platforms are discussed in detail.

Mongeau, S. (2019, October 22). What is cybersecurity data science? Data Science Central.
Data science is defined and explained in detail. Several other related sources and their direct links are provided for further reading.

Cornell, C. (2024, May 2). Council post: Cybersecurity in 2024 gut-check: What to expect from AI, automation and beyond. Forbes. https://www.forbes.com/sites/forbestechcouncil/2024/04/19/cybersecurity-in-2024-gut-check-what-to-expect-from-ai-automation-and-beyond/?sh=16d6e35c5148
The article attempts a current assessment and a futuristic description of the use of AI in the future of cybersecurity.