title: ÐÐ¾Ð½ÑÐµÐ¿ÑÐ¸Ñ SIEM-ÑÐ¸ÑÑÐµÐ¼ Ð² Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼Ð°Ñ ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²ÑÑ Ð¾ÑÐ³Ð°Ð½Ð¸Ð·Ð°ÑÐ¸Ð¹
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: The concept of SIEM systems in automated systems of financial organizations
Creators: name: ÐÐ¸ÐºÐ¸ÑÐ¸Ð½Ð°, ÐÐ°ÑÑÑ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2025
Subjects: siem
wazuh
kaspersky
usergate
Ð°Ð½Ð°Ð»Ð¸Ð· Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸
Ð°Ð½Ð°Ð»Ð¸Ð· Ð»Ð¾Ð³Ð¾Ð²
ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²ÑÐµ Ð¾ÑÐ³Ð°Ð½Ð¸Ð·Ð°ÑÐ¸Ð¸
security analysis
log analysis
financial organizations

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° ÐºÐ¾Ð½ÑÐµÐ¿ÑÐ¸Ð¸ SIEM-ÑÐ¸ÑÑÐµÐ¼Ñ ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²Ð¾Ð¹ Ð¾ÑÐ³Ð°Ð½Ð¸Ð·Ð°ÑÐ¸Ð¸ Ð¸ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð¾Ð¹ ÐºÐ¾Ð½ÑÐµÐ¿ÑÐ¸Ð¸. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ Ð¼ÐµÑÐ¾Ð´Ñ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐ¾Ð±ÑÑÐ¸Ð¹ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð² ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²Ð¾Ð¼ ÑÐµÐºÑÐ¾ÑÐµ. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÑÐ¾Ð²ÐµÑÑÐ¸ Ð°Ð½Ð°Ð»Ð¸Ð· Ð°ÐºÑÑÐ°Ð»ÑÐ½ÑÑ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ð¹ Ð¿Ð¾ÑÐ²ÑÑÐµÐ½Ð½ÑÐµ ÐºÐ¸Ð±ÐµÑÐ°ÑÐ°ÐºÐ°Ð¼ Ð½Ð° ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²ÑÐ¹ ÑÐµÐºÑÐ¾Ñ. 2. Ð Ð°ÑÑÐ¼Ð¾ÑÑÐµÑÑ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ðµ SIEM-ÑÐ¸ÑÑÐµÐ¼Ñ. 3. ÐÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°ÑÑ Ð¼ÐµÑÐ°Ð½Ð¸Ð·Ð¼Ñ ÐºÐ¾ÑÑÐµÐ»ÑÑÐ¸Ð¸ Ð² SIEM-ÑÐ¸ÑÑÐµÐ¼Ð°Ñ. 4. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°ÑÑ ÐºÐ¾Ð½ÑÐµÐ¿ÑÐ¸Ñ SIEM-ÑÐ¸ÑÑÐµÐ¼Ñ Ð´Ð»Ñ ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²ÑÑ Ð¾ÑÐ³Ð°Ð½Ð¸Ð·Ð°ÑÐ¸Ð¹. 5. Ð ÐµÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°ÑÑ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½ÑÑ ÐºÐ¾Ð½ÑÐµÐ¿ÑÐ¸Ñ SIEM-ÑÐ¸ÑÑÐµÐ¼Ñ. 6. ÐÑÐµÐ½Ð¸ÑÑ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ. Ð ÑÐ¾Ð´Ðµ Ð´Ð¸Ð¿Ð»Ð¾Ð¼Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ ÐºÐ¸Ð±ÐµÑÐ°ÑÐ°Ðº Ð½Ð° ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²ÑÐ¹ ÑÐµÐºÑÐ¾Ñ; Ð±ÑÐ»Ð° Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð° Ð°ÑÑÐ¸ÑÐµÐºÑÑÑÐ° Ð¸ Ð¿ÑÐ¸Ð½ÑÐ¸Ð¿ ÑÐ°Ð±Ð¾ÑÑ SIEM-ÑÐ¸ÑÑÐµÐ¼Ñ Wazuh; Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÐ°Ð¹Ð»Ñ ÑÐ¾Ð±ÑÑÐ¸Ð¹ ÑÐ°ÐºÐ¸Ñ ÑÑÐµÐ´ÑÑÐ² Ð·Ð°ÑÐ¸ÑÑ, ÐºÐ°Ðº Kaspersky Security Center, Kaspersky Secure Mail Gateway Ð¸ Next-Generation Firewall UserGate Ð´Ð»Ñ Ð´Ð°Ð»ÑÐ½ÐµÐ¹ÑÐµÐ¹ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ¸ Ð¿ÑÐ°Ð²Ð¸Ð» SIEM-ÑÐ¸ÑÑÐµÐ¼Ñ Wazuh. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð° Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ð° Ð¸ ÑÐµÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð° ÐºÐ¾Ð½ÑÐµÐ¿ÑÐ¸Ñ SIEM-ÑÐ¸ÑÑÐµÐ¼Ñ Ð´Ð»Ñ ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²ÑÑ Ð¾ÑÐ³Ð°Ð½Ð¸Ð·Ð°ÑÐ¸Ð¹, Ð¿ÑÐ¾Ð´ÐµÐ¼Ð¾Ð½ÑÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð° ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÑ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ð½Ð¾Ð³Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð°. ÐÑÐ» ÑÐ´ÐµÐ»Ð°Ð½ Ð²ÑÐ²Ð¾Ð´ Ð¾ Ð½ÐµÐ¾Ð±ÑÐ¾Ð´Ð¸Ð¼Ð¾ÑÑÐ¸ SIEM-ÑÐ¸ÑÑÐµÐ¼Ñ Ð² ÐºÐ¾Ð½ÑÑÑÐµ ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²ÑÑ Ð¾ÑÐ³Ð°Ð½Ð¸Ð·Ð°ÑÐ¸Ð¹. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¾ÑÐ½Ð¾Ð²Ñ Ð´Ð»Ñ Ð¿ÑÐ¾ÐµÐºÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÑÐ¸ÑÑÐµÐ¼ Ð°Ð´Ð¼Ð¸Ð½Ð¸ÑÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÐÐ Ð² ÑÐ¸Ð½Ð°Ð½ÑÐ¾Ð²Ð¾Ð¼ ÑÐµÐºÑÐ¾ÑÐµ.
description: The purpose of the work is to develop the concept of a financial institutions SIEM system and implement the developed concept. The subject of the research is methods of analyzing information security events in the financial sector. Tasks to be solved during the research: 1. To analyze relevant research on cyberattacks on the financial sector. 2. Consider existing SIEM systems. 3. Analyze the mechanisms of correlation in SIEM systems. 4. To develop concepts of a SIEM system for financial organizations. 5. Implement the developed SIEM system concept. 6. Evaluate the results obtained from the SIEM system. During the work, modern research in the field of cyberattacks on the financial sector was analyzed; the architecture and operating principle of the Wazuh SIEM system were investigated; logs of security tools such as Kaspersky Security Center, Kaspersky Secure Mail Gateway, and Next-Generation Firewall UserGate were analyzed for further development of the rules of the Wazuh SIEM system. As a result of the work, the concept of a SIEM system for financial organizations was proposed and implemented, and the effectiveness of the proposed tool was demonstrated. It was concluded that a SIEM system is necessary in the circuit of financial organizations. The results obtained can be used as a basis for designing information security administration systems in the financial sector.