# Enhancing Cloud Security--Proactive Threat Monitoring and Detection Using a SIEM-Based Approach
## 2 Related Works  
This section aims to provide an overview of the existing research and literature pertinent to the subject of our study and highlights the contribution of our research. In the realm of cloud security, several established frameworks serve as pivotal guides for organizations aiming to fortify their cloud environments. These frameworks and several other guidelines from states or federal agencies offer structured approaches and best practices to mitigate risks and ensure the integrity, confidentiality, and availability of data and services in cloud infrastructures. Among the notable [17; 18] frameworks are the NIST Cybersecurity Framework, which provides a comprehensive set of guidelines for managing and reducing cybersecurity risks, while the NIST Special Publication (SP800-144) provides guidelines on security and privacy in public cloud computing. It covers the security and privacy challenges and considerations for organizations that outsource data, applications, and infrastructure to a public cloud environment. Similarly, the Center for Internet Security (CIS) Controls provides a prioritized and actionable framework to help organizations enhance their cybersecurity posture and defend against cyber threats. Also, both ENISA and the Cybersecurity and Infrastructure Security Agency (CISA) have released extensive guidelines specifically tailored to address the unique challenges and requirements of cloud security. ENISA provides valuable insights into cloud security best practices and risk management strategies within the European context, while CISA offers comprehensive resources for safeguarding critical infrastructure and enhancing cybersecurity resilience in the United States. In addition, the Cloud Security Alliance (CSA) provides a suite of resources and frameworks tailored specifically to cloud security. Their frameworks, such as the Cloud Controls Matrix (CCM) and the Security Guidance for Critical Areas of Focus in Cloud Computing, are instrumental in establishing robust cloud security strategies. Likewise, COBIT \(5\), a globally recognized framework for the governance and management of enterprise IT, was extended to COBIT \(5\) for cloud computing to provide practical guidance for enterprises using or considering using cloud computing. The framework highlights cloud computing challenges, governance and management in the cloud, cloud assurance reviews, and cloud risk assessment. Furthermore, ISO/IEC2701 [19], an extension of the ISO/IEC 27001 standard [20], focuses specifically on information security controls for cloud services. It provides additional guidelines and controls to address the unique challenges and requirements of cloud computing environments. Moreover, the major CSPs (Azure, AWS, Google) developed well-architected frameworks that provide tailored recommendations and specific guidance for securing cloud environments within their respective platforms. Table 2 presents an overview of implementation strategies and recommendations tailored for incident management and compliance, specifically aligned with the Microsoft Well-Architected Framework in accordance with Microsoft Azure as the cloud environment utilized in this study. Several other studies have been carried out on this subject matter, [PERSON] et al. [22] highlighted the critical nature of security in cloud environments and the difficulty of maintaining a comprehensive view of the safety of individual resources in large cloud computing systems. To address this challenge, the authors propose the utilization of SIEM technology for central monitoring and maintaining awareness of security threats. The paper analyses the technical requirements, logic, and legal framework of SIEM in the context of the Czech Republic and proposes a framework for utilizing SIEM in cloud computing environments. [PERSON] et al. [23] conducted a comprehensive review of the status and prospects of SIEM technology.