Mostrar el registro sencillo del ítem
Ponencia
Leveraging Digital Twins and SIEM Integration for Incident Response in OT Environments
dc.contributor.editor | Varela Vaca, Ángel Jesús | es |
dc.contributor.editor | Ceballos Guerrero, Rafael | es |
dc.contributor.editor | Reina Quintero, Antonia María | es |
dc.creator | Arias, Adei | es |
dc.creator | Arellano, Cristobal | es |
dc.creator | Zurutuza, Urko | es |
dc.date.accessioned | 2024-06-13T09:03:26Z | |
dc.date.available | 2024-06-13T09:03:26Z | |
dc.date.issued | 2024 | |
dc.identifier.citation | Arias, A., Arellano, C. y Zurutuza, U. (2024). Leveraging Digital Twins and SIEM Integration for Incident Response in OT Environments. En Jornadas Nacionales de Investigación en Ciberseguridad (JNIC) (9ª.2024. Sevilla) (294-301), Sevilla: Universidad de Sevilla. Escuela Técnica Superior de Ingeniería Informática. | |
dc.identifier.isbn | 978-84-09-62140-8 | es |
dc.identifier.uri | https://hdl.handle.net/11441/160432 | |
dc.description.abstract | The Industrial Internet of Things (IIoT) has digitally transformed industrial processes albeit at the expense of increasing exposure to new security threats. System Information and Event Management (SIEM) systems, typically designed for Information Technology (IT), may struggle with the high data volume, specialized security needs, and real-time response requirements of IIoT environments. Digital Twins (DT), virtual replicas of physical devices, offer a solution to these challenges. By integrating SIEM with DT, incident response can be automated in Operational Technology (OT) environments. This integration enhances real-time threat detection, response coordination and post-incident tasks to ensure the security and continuity of industrial operations. A use case and prototype validate the effectiveness of this approach and highlight its potential to strengthen OT security in the face of evolving threats. | es |
dc.format | application/pdf | es |
dc.format.extent | 8 | es |
dc.language.iso | eng | es |
dc.publisher | Universidad de Sevilla. Escuela Técnica Superior de Ingeniería Informática | es |
dc.relation.ispartof | Jornadas Nacionales de Investigación en Ciberseguridad (JNIC) (9ª.2024. Sevilla) (2024), pp. 294-301. | |
dc.rights | Attribution-NonCommercial-NoDerivatives 4.0 Internacional | * |
dc.rights.uri | http://creativecommons.org/licenses/by-nc-nd/4.0/ | * |
dc.subject | IIoT | es |
dc.subject | Digital Twins | es |
dc.subject | Threat Detection | es |
dc.subject | Incident Response | es |
dc.subject | Attack Detection | es |
dc.title | Leveraging Digital Twins and SIEM Integration for Incident Response in OT Environments | es |
dc.type | info:eu-repo/semantics/conferenceObject | es |
dc.type.version | info:eu-repo/semantics/publishedVersion | es |
dc.rights.accessRights | info:eu-repo/semantics/openAccess | es |
dc.publication.initialPage | 294 | es |
dc.publication.endPage | 301 | es |
dc.eventtitle | Jornadas Nacionales de Investigación en Ciberseguridad (JNIC) (9ª.2024. Sevilla) | es |
dc.eventinstitution | Sevilla | es |
dc.relation.publicationplace | Sevilla | es |
Ficheros | Tamaño | Formato | Ver | Descripción |
---|---|---|---|---|
JNIC24_312.pdf | 1.109Mb | [PDF] | Ver/ | |