Building a Scalable Security Operations Center: A Focus on Open-source Tools
Christian Bassey, Ebenezer Tonye Chinda, Samson Idowu
Journal of Engineering Research and Reports · pp. 196–209 · Published 21 Jun 2024
10.9734/jerr/2024/v26i71203Abstract
Given the prevalence of a wide variety of cyber attacks against businesses of all sizes, it is essential to ensure that adequate security monitoring of organizational assets and infrastructure is in place to ensure the early detection and response to security incidents. By using a security information and event management (SIEM) tool in collaboration with other security tools, such as an extended detection and response (XDR) tool, all housed in an organizational unit, adequate security monitoring and response to detected incidents can be achieved. This research builds a SOC architecture with various components to ensure complete security visibility across endpoints and digital assets. Then, it proposes low-cost open-source tooling that can be used to implement this architecture. To validate the performance of this architecture, the architecture was implemented using the proposed tools, which included the Wazuh platform as the XDR and SIEM tool, TheHive for case management, and Suricata for network intrusion detection. Subsequently, various cybersecurity scenarios, such as brute force attacks, malware downloads, and DoS attacks, were executed against endpoints monitored by this deployed architecture. The results show that the tools implemented performed the correct exposure assessment and successfully detected and responded to the various scenarios. This paper proposed a security operations center architecture utilizing open-source tools and successfully implemented it to detect common cybersecurity attacks.
Cited by 20
Eleftherios Zacharioudakis, Elena Kakoulli · Lecture Notes in Networks and Systems · 2025
Muharman Lubis, Muhammad Irfan Luthfi, Rd. Rohmat Saedudin · Computers · 2026
Adil Khan, Suleiman Y. Yerima · 2025 IEEE Smart World Congress (SWC) · 2025
Achmad Sutanto, Arif Rakhman · Journal of Applied Informatics and Computing · 2025
Willian Dimitrov, Dragostin Tsekov, Valentin Rujenov · 2024 International Conference Automatics and Informatics (ICAI) · 2024
Hassan Jalil Hadi, Naveed Ahmad, Kamran Aziz · IEEE Access · 2024
Courage Ojo, Emmanuel Ayodeji Osoko, Joy Nnenna Okolo · World Journal of Advanced Research and Reviews · 2024
Anikó Pikó, Anna Bánáti, Eszter Kail · 2024 IEEE 22nd Jubilee International Symposium on Intelligent Systems and Informatics (SISY) · 2024
Showing 8 of 20 known citations — external sources report more than can currently be individually listed.
Related research
- Comparative Analysis of Responses to Covid 19 between Europe, Asia, America and Africa- A Literature Review of Four Nations — shares topic coverage
- Response to F3 Selection for Grain Yield in Durum Wheat [Triticum turgidum (L.) Thell. ssp. turgidum conv. durum (Desf.) Mac Key] under South Mediterranean Conditions — shares topic coverage
- Socio-Economic Attributes of Residents as Drivers of Adaptation to Climate Change Effects in a Nigerian Traditional Urban Center — shares topic coverage
- Impact of Oil Pollution on Livelihood: Evidence from the Niger Delta Region of Nigeria — shares topic coverage
- Smallholder Farmers’ Perception and Responses to Climate Change and Variability in West Shewa, Oromia, Ethiopia — shares topic coverage
Article metrics
Real usage data collected on this platform.
24
Page views
0
PDF downloads
3
Outbound clicks
20
Citations
Views over time
Views by country
Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".
Traffic sources
Referring site, by host.
Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.