Guide to computer security log management

Information Assurance Directorate

Klingensmith, W. (2024) · doi:10.18260/1-2--25310 · Cited by 5

Is the Transit Industry Prepared for the Cyber Revolution? Policy Recommendations to Enhance Surface Transit Cyber Preparedness

Belcher, S., Belcher, T., Greenwald, E., & Thomas, B. (2020) · doi:10.31979/mti.2020.1939 · Cited by 5

Analyze Windows Logs to Investigate Phishing Attack

Sharikov, P., & Mokrinskii, N. (2025) · International Ural Conference on Electrical Power Engineering (UralCon) · doi:10.1109/uralcon67204.2025.11206617 · Cited by 4

Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets

Ross, R., Pillitteri, V. Y., Guissanie, G., Wagner, R. H., Graubart, R. D., & Bodeau, D. J. (2019) · Cited by 4

Audit Mechanisms in Electronic Health Record Systems

King, J., Smith, B. H., & Williams, L. A. (2012) · International Journal of Computational Models and Algorithms in Medicine · doi:10.4018/jcmam.2012040102 · Cited by 4

Development of Highly Secured Cloud Rendered Log Management System

SagarS, R., & Pawar Anil, B. (2014) · International Journal of Computer Applications · doi:10.5120/18992-0448 · Cited by 4

Towards Standardising Firewall Reporting

Ranathunga, D., Roughan, M., Kernick, P., & Falkner, N. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-40385-4_9 · Cited by 4

Multi-agent Based Forensic Analysis Framework for Infrastructures Involving Storage Networks

Khan, M. N. A. (2018) · Proceedings of the National Academy of Sciences India Section A Physical Sciences · doi:10.1007/s40010-017-0473-3 · Cited by 4

Log-Based Malicious Activity Detection Using Machine and Deep Learning

Tarnowska, K. A., & Patel, A. (2020) · Springer eBooks · doi:10.1007/978-3-030-62582-5_23 · Cited by 5

Some Experiments on High Performance Anomaly Detection

Ianni, M., & Masciari, E. (2022) · Euromicro International Conference on Parallel, Distributed and Network-Based Processing (PDP) · doi:10.1109/pdp55904.2022.00042 · Cited by 4

Measuring the forensic-ability of audit logs for nonrepudiation

King, J. (2013) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1109/icse.2013.6606732 · Cited by 4

Voting Systems Audit Log Study

Wagner, D. (2010) · Cited by 4

NIST Big Data Interoperability Framework: volume 4, security and privacy, version 2

NIST Big Data Public Working Group (2018) · doi:10.6028/nist.sp.1500-4r1 · Cited by 4

Remote Labs in Cybersecurity Education

Otoum, N. A., Maqousi, A. Y. A., Alauthman, M., & Almomani, A. (2025) · International Journal of Cloud Applications and Computing · doi:10.4018/ijcac.383300 · Cited by 3

O-Cloud Security: A Comprehensive Survey of Threats, Mitigation Strategies, and Future Directions

Shehab, M., Aly, Y., Badawy, A., Mohamed, A. M. S., Barhamgi, M., & Salem, S. (2025) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2025.3600528 · Cited by 4

Integrating Wazuh for Efficient Real-Time Threat Monitoring and Vulnerability Assessment in a SOC Environment

Hajamydeen, A. I., Hasni, M. D., & Abdullah, M. I. (2024) · Advances in chemical and materials engineering book series · doi:10.4018/979-8-3693-2814-9.ch013 · Cited by 3

Enhancing Syslog Message Security and Reliability over Unidirectional Fiber Optics

Anton, A., Csereoka, P., Capota, E. A., & Cioargă, R.-D. (2024) · Sensors · doi:10.3390/s24206537 · Cited by 3

CNN with Paragraph to Multi-Sequence Learning for Sensitive Text Detection

Alzhrani, K., Alrasheedi, F. S., Kateb, F., & Boult, T. E. (2019) · International Conference on Computer Applications & Information Security (ICCAIS) · doi:10.1109/cais.2019.8769490 · Cited by 4

Time Series Based Pattern Recognition for Anomaly Detection from System Audit Logs

Pokharel, P., Sigdel, S., Pokhrel, R., & Joshi, B. (2019) · doi:10.1109/aitb48515.2019.8947448 · Cited by 3

Semantic Query Federation for Scalable Security Log Analysis

Kurniawan, K. (2018) · Lecture notes in computer science · doi:10.1007/978-3-319-98192-5_48 · Cited by 3

Secure Log Transfer by Replacing a Library in a Virtual Machine

Sato, M., & Yamauchi, T. (2013) · Lecture notes in computer science · doi:10.1007/978-3-642-41383-4_1 · Cited by 3

User and Device Tracking in Private Networks by Correlating Logs: A System for Responsive Forensic Analysis

Chaudhari, S., Chauhan, H., Tomar, S. S., & Rawat, A. (2014) · International Conference on Communication Systems and Network Technologies · doi:10.1109/csnt.2014.253 · Cited by 3

An analysis of the impact of information security policies on computer security breach incidents in law firms

Littman, M. K., & Heikkila, F. M. (2009) · Cited by 3

Time and Frequency Metrology

Vattikonda, B., Das, M., Bhardwaj, T., Panja, S., Arora, P., Gupta, A., & Aswal, D. K. (2020) · Springer eBooks · doi:10.1007/978-981-15-8872-3_5 · Cited by 3

Mind mapping in artificial intelligence for data democracy

Hernández, J. M. G. (2020) · Elsevier eBooks · doi:10.1016/b978-0-12-818366-3.00004-6 · Cited by 3

Model Alur Kerja Penanganan Bukti Digital Untuk Data Multimedia

Dirman, D., Prayudi, Y., & Ramadhani, E. (2021) · JATISI (Jurnal Teknik Informatika dan Sistem Informasi) · doi:10.35957/jatisi.v8i3.987 · Cited by 3

LLM-Powered Automated Cloud Forensics: From Log Analysis to Investigation

Alharthi, D. N., & Yasaei, R. (2025) · IEEE ... International Conference on Cloud Computing · doi:10.1109/cloud67622.2025.00012 · Cited by 2

An AI-Based Risk Analysis Framework Using Large Language Models for Web Log Security

Jeong, H., & Joe, I. (2025) · Electronics · doi:10.3390/electronics14173512 · Cited by 2

Network Latency in Systems Event Monitoring for Multiple Locations

Kufel, Ł. (2015) · Scientific Programming · doi:10.1155/2015/371620 · Cited by 2

Development of Secured Log Management System Over Blockchain Technology

Rajebhosale, S. S., & Nikam, M. C. (2018) · International Journal of Cyber Research and Education · doi:10.4018/ijcre.2019010104 · Cited by 2

The Privacy-Centric Data Pipeline : Strategies for Implementing Robust Security Measures in Data Engineering

Sekar, P. K. (2024) · International Journal of Scientific Research in Computer Science Engineering and Information Technology · doi:10.32628/cseit241051046 · Cited by 2

A Comprehensive Review of Federated Learning Architectures for Insider Threat Detection in Distributed SQL-Based Enterprise Environments

Ijiga, O. M., Okika, N., Balogun, S. A., Enyejo, L. A., & Agbo, O. J. (2025) · doi:10.38124/ijisrt/25jul392 · Cited by 2

Analyzing Big Security Logs in Cluster with Apache Spark

Oktay, T., & Sayar, A. (2016) · Advances in intelligent systems and computing · doi:10.1007/978-3-319-47898-2_14 · Cited by 2

Classifying Database Users for Intrusion Prediction and Detection in Data Security

Bakır, Ç., & Hakkoymaz, V. (2020) · Tehnicki vjesnik - Technical Gazette · doi:10.17559/tv-20190710100638 · Cited by 2

Extra-Tree: A model to organize execution traces of Web services

Sinha, S., Sinha, S. K., & Purkayastha, B. S. (2010) · International Conference on Computer Information Systems and Industrial Management Applications (CISIM) · doi:10.1109/cisim.2010.5643460 · Cited by 2

Using HL7 in hospital staff assignments

Unluturk, M. S. (2013) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2013.11.003 · Cited by 2

Design and Implementation of Management and Query Center of Log Auditing System Based on SSH2

Cheng, Z., Wang, W., & Gao, M. Y. (2012) · Advances in intelligent and soft computing · doi:10.1007/978-3-642-27866-2_42 · Cited by 2

Design of a Log Management Infrastructure Using Meta-Network Analysis

Anastopoulos, V., & Katsikas, S. K. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-44341-6_7 · Cited by 2

Domain 1: Access Control

Conrad, E., Misenar, S., & Feldman, J. (2014) · Elsevier eBooks · doi:10.1016/b978-0-12-417142-8.00001-7 · Cited by 2

Syslog Anomaly Detection Using Supervised Machine Learning Models

Younesian, E., Siklosi, M., Khatib, N., & Hošek, J. (2021) · International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT) · doi:10.1109/icumt54235.2021.9631564 · Cited by 2

Log message with JSON item count for root cause analysis in microservices

Koyama, T., & Kushida, T. (2023) · Conference on Cloud and Internet of Things (CIoT) · doi:10.1109/ciot57267.2023.10084901 · Cited by 2

Threat detection and response with SIEM system

Alatise, T. I., & Nottidge, O. E. (2024) · International Journal of Communication and Information Technology · doi:10.33545/2707661x.2024.v5.i1a.78 · Cited by 2

Cybersecurity Management Through Logging Analytics

Muggler, M., Eshwarappa, R., & Cankaya, E. C. (2017) · Advances in intelligent systems and computing · doi:10.1007/978-3-319-60585-2_1 · Cited by 2

Security for UDNs: A Step Toward 6G

de Ree, M., Parsamehr, R., Vasudevan, V. A., Μαντάς, Γ., Politis, I., Rodrı́guez, J., Kotsopoulos, S. A., Otung, I. E., Martí­nez-Ortega, J.-F., & Gil‐Castiñeira, F. (2021) · Springer eBooks · doi:10.1007/978-3-030-74648-3_5 · Cited by 2

Correlating IDS alerts with system logs by means of a network-centric SIEM solution

Bråthen, A. (2011) · NORA - Norwegian Open Research Archives · Cited by 2

Domain 1

Conrad, E., Misenar, S., & Feldman, J. (2012) · Elsevier eBooks · doi:10.1016/b978-1-59749-961-3.00002-9 · Cited by 2

Enhanced Security Requirements for Protecting Controlled Unclassified InformationPreprint

Ross, R. (2020) · doi:10.6028/nist.sp.800-172-draft · Cited by 2

Data Integrity: Recovering from Ransomware and Other Destructive Events

McBride, T., Ekstrom, M. P., Lusty, L., Sexton, J., & Townsend, A. (2020) · doi:10.6028/nist.sp.1800-11 · Cited by 5

Observation and mitigation of causal re-ordering in distributed business process logs

Pecarina, J. M., Fu, M., & Liu, J. (2015) · International Conference on Collaboration Technologies and Systems (CTS) · doi:10.1109/cts.2015.7210422 · Cited by 1

Development of Secured Log Management System Over Blockchain Technology

Rajebhosale, S. S., & Nikam, M. C. (2020) · IGI Global eBooks · doi:10.4018/978-1-7998-5351-0.ch013 · Cited by 1

The Design and Implementation of ELK Based System for Detection of Unauthorized Web Access

Drašković, V., Ciric, V. M., Milentijević, I., & Stojanovic, N. M. (2025) · International Conference on Electrical, Electronic and Computing Engineering (IcETRAN) · doi:10.1109/icetran66854.2025.11114263 · Cited by 1

A Simulation Study on the Theoretical Potential of Quantum-Enhanced Federated Security Operations

Campbell, R. (2025) · Sensors · doi:10.3390/s25195949 · Cited by 1

Context-Aware Intelligent Data Integration Approach: A practical Hybrid Retrieval Agent

Hamza, R. M., & Ajam, G. (2026) · International Conference on Computing and Emerging Sciences · doi:10.1145/3797491.3797524 · Cited by 1

Risk-Driven Deployment and Forensic Readiness Framework for AI-Enabled Security Operations Centers

Torstensson, O., Prokopovych-Tkachenko, D., Desiatko, A., Hbur, Z. V., & Брітченко, І. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6050149 · Cited by 1

A software method for managing event logs to improve quality and dependability of business processes

Unluturk, M. S., & Kurtel, K. (2010) · Annual Conference on Computers · Cited by 1

Securing an alerting subsystem for a keystroke-based user identification system

Arseni, Ş.-C., Popovici, E. C., Stancu, L. A., Guta, O. G., & Halunga, S. V. (2014) · International Conference on Communications (COMM) · doi:10.1109/iccomm.2014.6866685 · Cited by 1

Secure and Fast Log Transfer Mechanism for Virtual Machine

Sato, M., & Yamauchi, T. (2014) · Journal of Information Processing · doi:10.2197/ipsjjip.22.597 · Cited by 1

A SURVEY ON SECURED LOGGING IN THE CLOUD

Kharade, P. (2014) · International Journal of Research in Engineering and Technology · doi:10.15623/ijret.2014.0307025 · Cited by 1

A comprehensive security policy research on web information system

Wang, F., Li, C., Zhao, L., & Li, X. (2009) · IEEE International Conference on Automation and Logistics (ICAL) · doi:10.1109/ical.2009.5262671 · Cited by 1

Methodology of Implementing the Pulse code techniques for Distributed Optical Fiber Sensors by using FPGA: Cyclic Simplex Coding

Mulualem, Y. (2014) · International Journal of Computer Applications Technology and Research · doi:10.7753/ijcatr0503.1007 · Cited by 1

Estimating Posterior Probabilities to Identify Breach Points during Cyber-attacks

Raghavan, S., & Raghavan, S. V. (2015) · International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec) · doi:10.1109/cybersec.2015.30 · Cited by 1

Predictive Computing and Information Security: A Technical Review

Gupta, P. K., Tyagi, V., & Singh, S. K. (2017) · Springer eBooks · doi:10.1007/978-981-10-5107-4_2 · Cited by 1

Impact of Information Security Policies on Computer Security Breach Incidences in Kenyan Public Universities

Sirma, J., Muiru, M., & Kipchillat, C. (2014) · Journals & Books Hosting (International Knowledge Sharing Platform) · Cited by 1

Analysis of Alternatives for a Security Information and Event Management Tool in a Virtualized Environment

Rodríguez, S., & Roy, A. (2018) · Cited by 1

Kurumsal Haberleşme Sistemi

Çobanoğlu, T., & AKÇAY, M. (2022) · Eskişehir Türk Dünyası Uygulama ve Araştırma Merkezi Bilişim Dergisi · doi:10.53608/estudambilisim.1013695 · Cited by 1

Implementasi Skema SecLaaS-RW dalam Membuat Aplikasi Secure Logging

VictoAraya, G., & Cahyono, S. (2022) · Info Kripto · doi:10.56706/ik.v16i3.44 · Cited by 2

Timed Genetic Process Mining for Robust Tracking of Processes under Incomplete Event Log Conditions

Effendi, Y. A., & Kim, M. (2024) · Electronics · doi:10.3390/electronics13183752 · Cited by 1

Identifying the Root Cause of a Cyber Attack Through Log Data Analysis: An Overview of the Challenges Faced by Novice Learners

Nagvekar, P. V., Das, S., & Iyer, S. R. (2025) · Communications in computer and information science · doi:10.1007/978-3-031-84391-4_12 · Cited by 1

Designing PhelkStat: Big Data Analytics for System Event Logs

Salman, M., Welch, B., Raymond, D., Marchany, R. C., & Tront, J. G. (2017) · VTechWorks (Virginia Tech) · Cited by 1

Log as a Secure Service Scheme (LASS) for Cloud

Imran, M., & Rahman, M. A. U. (2020) · Journal of scientific research · doi:10.37398/jsr.2020.640143 · Cited by 1

Assessment of Forensics Investigation Methods

Chauhan, P., & Bansal, P. (2021) · Smart innovation, systems and technologies · doi:10.1007/978-981-33-4443-3_30 · Cited by 1

An Efficient Analytical Approach to Visualize Text-Based Event Logs for Semiconductor Equipment

Lee, G., & Jeong, J. (2021) · Applied Sciences · doi:10.3390/app11135944 · Cited by 1

Modern Security Information and Event Management: Architecture, Analytics Pipelines, and Empirical Evaluation of SOC-Scale Threat Detection

Meesala, L. K. (2023) · International Journal of Scientific Research in Computer Science Engineering and Information Technology · doi:10.32628/cseit23564538 · Cited by 15

Reconsidering Data Logging in Light of Digital Forensics

Chou, B.-H., Takahashi, K., Hori, Y., & Sakurai, K. (2009) · Communications in computer and information science · doi:10.1007/978-3-642-02633-1_15 · Cited by 1

Assessing Network Intrusion Detection System performance: forensic implications

Alqahtani, M. (2013) · Tuwhera (Auckland University of Technology) · Cited by 1

Advancing Security Services for Cloud Applications

Elsayed, M. A. (2018) · QSpace (Queen's University Library) · Cited by 1

Threat Identification from Access Logs Using Elastic Stack

Vethanayagam, S. (2020) · NDSU Repository (North Dakota State University) · Cited by 1

Methods for Managed Deployment of User Behavior Analytics to SIEM product

Seppänen, M. (2021) · Theseus (Ammattikorkeakoulujen) · Cited by 1

Scalable Blockchain-assisted Log Storage System for Cloud-generated Logs

Pourmajidi, W. (2021) · doi:10.32920/ryerson.14653434.v1 · Cited by 1

Trustworthy Logging for Virtual Organisations

Huh, J. H. (2010) · OpenGrey (Institut de l'Information Scientifique et Technique) · doi:10.5287/ora-zbpzrpbnx · Cited by 1

Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking

Yagiz, M. A., Horasan, F., & Yurttakal, A. H. (2026) · arXiv · doi:10.48550/arxiv.2605.00065

A method to develop mission critical data processing systems for satellite based instruments. The spinning mode casePreprint

Lazzarotto, F., Fabiani, S., Costa, E., Persio, G. D., Monte, D., Donnarumma, I., Evangelista, Y., Feroci, M., Pacciani, L., Rubini, A., et al. (2010) · arXiv (Cornell University) · doi:10.13140/rg.2.2.17180.23680

Design and implementation of an audit subsystem for a separation kernel

Toh, B. P. (2010) · Calhoun: The Naval Postgraduate School Institutional Archive (Naval Postgraduate School)

Integrated user activity monitoring for regulatory services

Marder, M., Bhaskaran, K., Hernández, M. A., Laredo, J., Roşu, D., Ruan, Y., Driscoll, P., & Skinner, A. (2012) · IEEE/IFIP Network Operations and Management Symposium (NOMS) · doi:10.1109/noms.2012.6211992

Securing intelligent substations: Real-time situational awareness

Major, S., & Fekovic, E. (2014) · IEEE International Energy Conference (ENERGYCON) · doi:10.1109/energycon.2014.6850504

Build a Digital Evidence Map considered Log-Chain

Park, H., & Lee, S. (2014) · 정보보호학회논문지 · doi:10.13089/jkiisc.2014.24.3.523 · Cited by 2

Implicit Media Knowledge

Ly, M.-C., Germaneau, A., & Martinot, O. (2009) · International Conference on Networks · doi:10.1109/icn.2009.45

Some problems arising out of the cross-disciplinary nature of information systems security

Wang, T.-C. (1988) · Hawaii International Conference on System Sciences (HICSS) · doi:10.1109/hicss.1988.11986

Automatic forensic log file analysis for Mac OS X systems

Turedi, Z., & Han, L. (2013) · International Journal of Electronic Security and Digital Forensics · doi:10.1504/ijesdf.2013.055050

Null Value Estimation in Web Environment by using Fuzzy Rule based K-Mean Clustering

Agrawal, S., & Pandey, K. (2013) · International Journal of Computer Applications · doi:10.5120/12899-9822

Continuous Forensic Readiness

de Wit, J. (2013)

Human and organizational aspects of cyber security

Afzal, M. (2010)

for Digital Forensics Investigations

Tang, M., & Fidge, C. (2015)

FIDIS of Identity in the Information Society

Zwingelberg, H., Anrig, B., Ragusa, M., Demetis, D. S., Benoist, E., Dubuis, E., Haenni, R., & Nabeth, T. (2008)

Enhancing Seekable Sequential Key Generators along with FSS Scheme for Secure Logging in the Cloud

Rao, V. V. C., & Babu, A. S. (2013)

Proposed Methodology for Secure Image Logging System towards Cyber Forensic

Srivastava, A. K., & Kmar Sharma, R. (2013) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.5281/zenodo.21415115

GENERATING LOG FILE ANALYZERS

Aulenbacher, I. L. (2012) · LA Referencia (Red Federada de Repositorios Institucionales de Publicaciones Científicas)

Security metrics guide for information technology systems

Swanson, M., Bartol, N., Sabato, J., Hash, J., & Graffo, L. (2003) · doi:10.6028/nist.sp.800-55 · Cited by 210

Engineering principles for information technology security (a baseline for achieving security), revision a

Stoneburner, G., Hayden, C., & Feringa, A. (2004) · doi:10.6028/nist.sp.800-27ra · Cited by 88

Guide to secure web services

Singhal, A., Winograd, T., & Scarfone, K. A. (2007) · doi:10.6028/nist.sp.800-95 · Cited by 110

Products—Guidelines for Checklist Users and Developers Recommendations of the National

Quinn, S. D., Cook, M., Quinn, S. D., Cook, M., & Scarfone, K. A. (2011)

DRAFT Cloud Computing Synopsis and Recommendations Recommendations of the National

Badger, L., Grance, T., Badger, L., Grance, T., Patt-Corner, R., Voas, J., Gallagher, P. D., Draft, D., & Computing, C. (2011)