An Approach of Data Mining in Security Information and Event Management: A Survey

Security Information and Event Management (SIEM) systems are today a main ingredient of complex enterprise networks. SIEM associates Security Information Management (SIM) and Security Event Management (SEM). It highlights the effect of the technology on the whole system, even though the focus is on security. The first limelight is on analysis and reporting of log data and long-term storage while the second limelight on real-time monitoring and notifications. The basic role of SIEM in data infrastructure, its classification in specific cloud environment, and technical requirements for SIEM solution implementation into a cloud environment correlate to individual cloud distribution models. Some researchers would rather speak of 'SIEOM', adding the O for "opportunity". We will see how various data mining techniques can be used in security information and event management system to upgrade the efficiency of the system.