Project DiSIEM
summary
Project DiSIEM extends existing SIEMs with concrete plugins that are already prototyped and integrated: five diversity mechanisms (OSINT collection and fusion, probabilistic risk models, new visualisations, redundant monitoring and behavioural detectors, and long‑term archival), live OSINT fusion feeding events and trend scores into SIEM databases, and encrypted archival using secret sharing across Amazon, Azure and Google. Implementations and dashboards exist as prototypes and demonstrate improved event richness and risk scoring for SOC workflows.
AI-written summary · about
chapters (6)
- 0:00Introduction to Project DiSIEM
- 9:25Project goals and consortium
- 22:56Data visualization and applications
- 36:20Case studies and demonstrations
- 45:23Cyber security support and challenges
- 49:31Q&A and closing remarks
related talks
40mSIEM as Needed: Elasticsearch, Energy Logserver, Wazuh...
20mSIEM with Elastic – Insights for Security, Freedom for DevOp
33mSecurity Logging Use Cases: Building an Open-Source SIEM
20mSIEM There, Done That: Rising Up in the SecOps Revolution
02mThe Challenges of Legacy SIEM Models
29mReinventing ETL for Detection and Response Teams
49mBuilding digital resilience with unified security and observability
22mThe Analytics Enabled SOC Best Practices for Improving Incident Response