EVOLVED-5G - SIEM (Security information and event management) with 5G capabilities

The implementation of enhanced mechanisms to manage and ensure security in this industrial ecosystem is mandatory. For IP networks, SIEM (Security information and event management) systems offer security protection by performing real-time monitoring and analysis of events as well as tracking and logging of security data for compliance or auditing purposes. However, in 5G networks, security management is handled by the 5G Core Network. Therefore, today, in a unified industrial network (IP and 5G NPN), security information systems have no monitoring and control capabilities for industrial devices that use 5G access. Extending a SIEM system with 5G capabilities enhances the platform by offering access to 5G security information, such as real-time monitoring and updates on the security status of the 5G NPN devices. As a result, the security administrator of an Industry 4.0 environment can have a clearer and more complete picture of the underlying industrial network. FOGUS, with the development of its Network App, aims to bridge the communication gap between SIEM and 5G NPN devices.