Development of a methodology for implementing and identifying the effectiveness of a SIEM system in a trusted zone environment

Krasov Andrey Vladimirovich

Classification of steganographic methods of information transformation is described in the basic model of threats to the security of personal data during their processing in personal data information systems, approved by the FSTEC of the Russian Federation in 2008. This technique will be useful for familiarization of all managers and heads of security services of organizations that plan to install a SIEM system. The article presents the results of work on the Grant-I B5/2020 project, proposals for improving the basic model.

Keywords: threat model, SIEM, trusted zone, machine learning, IPS/IDS.