Comparing Open Source Security Information and Event Management Solutions through Multi-Criteria Decision Analysis

Luschen Naidoo

Bakalářská práce

Abstract:

The goal of this thesis is to develop an MCDA-based framework that enables organizations to systematically evaluate and select the most suitable OSSIM (Open Source Security Information and Event Management) tool based on their specific needs. Multi-criteria decision analysis was researched to look at the possible ways that can be utilised. A demo of an already fully published SIEM tool was conducted to gain an understanding of what is required from OSSIM tools and what possible criteria can be made to compare these tools. With a lot of open source SIEM tools available, the list was reduced to have a more focused assessment of the criteria that was being tested. The scoring method was adopted for the MCDA and weights were assigned to each criteria accordingly. The MCDA resulted in the Elastic Security SIEM scoring the highest, this can be subject to change based on the organizations needs by manipulating the weights. Comparing the scores with how many users these different tools have confirms the legitimacy of the MCDA.

Keywords

SIEM, OSSIM, MCDA

Jazyk práce: angličtina

Datum vytvoření / odevzdání či podání práce: 26. 3. 2025

Obhajoba závěrečné práce

• Obhajoba proběhla 22. 5. 2025
• Vedoucí: Ing. Robert Hlavatý, Ph.D.
• Oponent: Lucie Chytilová, Ph.D.

Česká zemědělská univerzita v Praze

Provozně ekonomická fakulta

Bakalářský studijní program:
Informatics