WITHDRAWN: Design and Implementation of an Open-Source Security Operations Center for Effective Cyber Threat Detection and Response
preprint
OA: closed
CC-BY-4.0
Abstract
Abstract Given the increasing number of various cyberattacks targeting companies of all categories, it is crucial to make sure that organizational assets and infrastructure are correctly monitored for security threats in order to facilitate early detection and response. It is possible to provide sufficient security monitoring and incident response by utilizing a security information and event management (SIEM) tool in conjunction with additional security technologies, such as an extended detection and response (XDR) tool, all of which are located within an organizational unit. This study creates a OCS architecture with multiple elements to guarantee full security visibility across digital assets and endpoints. After that, it suggests open-source, inexpensive tools for putting this architecture into practice. In order to verify that this architecture is performing correctly, Utilizing the proposed methods, the architecture was put into practice. These included Suricata for network intrusion detection, The Hive for case management, and the Wazuh platform for XDR and SIEM tools. This deployed architecture was then used to monitor endpoints and run a variety of cybersecurity scenarios, including malware downloads, brute force attacks, and denial-of-service attacks. According to the results, the tools used carried out the proper exposure assessment and were able to identify and react to the different circumstances. Using open-source tools, this article presented a operations Center for Security design and successfully applied it to identify common cybersecurity threats.
Full text
9,337 characters
· extracted from
preprint-html
· click to expand
WITHDRAWN: Design and Implementation of an Open-Source Security Operations Center for Effective Cyber Threat Detection and Response | Research Square window.SnipcartSettings = { analytics: { enabled: false } }; (function() { var accessVector = localStorage.getItem('access_vector') || ''; window.dataLayer = window.dataLayer || []; if (accessVector) { window.dataLayer.push({ user: { profile: { profileInfo: { snid: accessVector } } } }); } })(); (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','GTM-K279D39R'); Browse Preprints In Review Journals COVID-19 Preprints AJE Video Bytes Research Tools Research Promotion AJE Professional Editing AJE Rubriq About Preprint Platform In Review Editorial Policies Our Team Advisory Board Help Center Sign In Submit a Preprint Cite Share Download PDF Research Article WITHDRAWN: Design and Implementation of an Open-Source Security Operations Center for Effective Cyber Threat Detection and Response Rakesh Bhavsar, Vishvjit Thakar This is a preprint; it has not been peer reviewed by a journal. https://doi.org/ 10.21203/rs.3.rs-5795888/v2 This work is licensed under a CC BY 4.0 License Status: Posted Version 2 posted You are reading this latest preprint version Show more versions Editorial Note 26 June, 2025. Research Square has withdrawn this preprint due to overlap with another author's published work . Editorial notes are used to provide important context regarding the topic of a preprint or to alert readers to potential issues concerning that preprint or a downstream publication associated with it. For more information on editorial notes, see our Editorial Policies . Abstract 26 June, 2025. Research Square has withdrawn this preprint due to overlap with another author's published work . Full Text 26 June, 2025. Research Square has withdrawn this preprint due to overlap with another author's published work . Additional Declarations No competing interests reported. Cite Share Download PDF Status: Posted Version 2 posted You are reading this latest preprint version Show more versions Research Square lets you share your work early, gain feedback from the community, and start making changes to your manuscript prior to peer review in a journal. As a division of Research Square Company, we’re committed to making research communication faster, fairer, and more useful. We do this by developing innovative software and high quality services for the global research community. Our growing team is made up of researchers and industry professionals working together to solve the most critical problems facing scientific publishing. Also discoverable on Platform About Our Team In Review Editorial Policies Advisory Board Help Center Resources Author Services Accessibility API Access RSS feed Manage Cookie Preferences © Research Square 2026 | ISSN 2693-5015 (online) Privacy Policy Terms of Service Do Not Sell My Personal Information {"props":{"pageProps":{"initialData":{"identity":"rs-5795888","acceptedTermsAndConditions":true,"allowDirectSubmit":true,"archivedVersions":[],"articleType":"Research Article","associatedPublications":[],"authors":[{"id":476939735,"identity":"20827e36-0210-46d3-86de-6fb28729b74c","order_by":0,"name":"Rakesh Bhavsar","email":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAZAAAAAyAQMAAABI0h/eAAAABlBMVEX///8AAABVwtN+AAAACXBIWXMAAA7EAAAOxAGVKw4bAAABEklEQVRIiWNgGAWjYFACNgYGxgaGBAMIT0KOH0QlFBCvxcZYsgGkxYB4LWmJGw6AaDxazNuPJT78uYMhz5z9jPGHn3sOGxufX5344YEBgzy/2AGsWmTOpB025j3DUGzZk2Mm2fPssJzZjbebJYCWGs6cnYBViwRDeps0YxsD0D1paQw8Bw4bm904uwGkJcHgNg4t/M/bf/4EaTn/LPnjnwOHEzfPOLv5B14tEmnHGHhBWm4kH5DmOQD0Pn/vNvy2SDxLluZtkyg2uPH4mLTMARtjiRu82ywSDCRw+4U/zfDjzzabPIPzic0f3xwARmX/2c03f1TYyPNLY9cCDwUkdgK6CEHAf4AU1aNgFIyCUTACAAB7jmVgGztOggAAAABJRU5ErkJggg==","orcid":"","institution":"Indrashil University","correspondingAuthor":true,"prefix":"","firstName":"Rakesh","middleName":"","lastName":"Bhavsar","suffix":""},{"id":476939736,"identity":"18e4682b-17ad-468d-9682-1f06a4f16d54","order_by":1,"name":"Vishvjit Thakar","email":"","orcid":"","institution":"Indrashil University","correspondingAuthor":false,"prefix":"","firstName":"Vishvjit","middleName":"","lastName":"Thakar","suffix":""}],"badges":[],"createdAt":"2025-01-09 11:08:16","currentVersionCode":2,"declarations":"","doi":"10.21203/rs.3.rs-5795888/v2","doiUrl":"https://doi.org/10.21203/rs.3.rs-5795888/v2","draftVersion":[],"editorialEvents":[],"editorialNote":"\u003cp\u003e26 June, 2025. Research Square has withdrawn this preprint due to overlap with another author's [\u003ca href=\"http://dx.doi.org/10.9734/jerr/2024/v26i71203\" rel=\"noreferrer noopener\" target=\"_blank\" title=\"http://dx.doi.org/10.9734/jerr/2024/v26i71203\"\u003epublished work\u003c/a\u003e](https://doi.org/10.9734/jerr/2024/v26i71203).\u003c/p\u003e","failedWorkflow":false,"files":[{"id":85502767,"identity":"181d6f08-2eec-4774-8bb2-2341011dc397","added_by":"auto","created_at":"2025-06-26 14:55:04","extension":"pdf","order_by":0,"title":"","display":"","copyAsset":false,"role":"manuscript-pdf","size":157612,"visible":true,"origin":"","legend":"","description":"","filename":"manuscript.pdf","url":"https://assets-eu.researchsquare.com/files/rs-5795888/v2/a3e5bb66-4a09-4335-ae5e-e0a11d313e6e.pdf"}],"financialInterests":"No competing interests reported.","formattedTitle":"WITHDRAWN: Design and Implementation of an Open-Source Security Operations Center for Effective Cyber Threat Detection and Response","fulltext":[{"header":"Full Text","content":"26 June, 2025. Research Square has withdrawn this preprint due to overlap with another author's [published work](https://doi.org/10.9734/jerr/2024/v26i71203)."}],"fulltextSource":"","fullText":"","funders":[],"hasAdminPriorityOnWorkflow":false,"hasManuscriptDocX":false,"hasOptedInToPreprint":true,"hasPassedJournalQc":"","hasAnyPriority":true,"hideJournal":true,"highlight":"","institution":"","isAcceptedByJournal":false,"isAuthorSuppliedPdf":false,"isDeskRejected":"","isHiddenFromSearch":true,"isInQc":false,"isInWorkflow":false,"isPdf":false,"isPdfUpToDate":true,"isWithdrawnOrRetracted":true,"journal":{"display":true,"email":"[email protected]","identity":"researchsquare","isNatureJournal":false,"hasQc":true,"allowDirectSubmit":true,"externalIdentity":"","sideBox":"","snPcode":"","submissionUrl":"/submission","title":"Research Square","twitterHandle":"researchsquare","acdcEnabled":true,"dfaEnabled":false,"editorialSystem":"","reportingPortfolio":"","inReviewEnabled":false,"inReviewRevisionsEnabled":true},"keywords":"","lastPublishedDoi":"10.21203/rs.3.rs-5795888/v2","lastPublishedDoiUrl":"https://doi.org/10.21203/rs.3.rs-5795888/v2","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/"},"manuscriptAbstract":"\u003cp\u003e26 June, 2025. Research Square has withdrawn this preprint due to overlap with another author's [published work](https://doi.org/10.9734/jerr/2024/v26i71203).\u003c/p\u003e","manuscriptTitle":"WITHDRAWN: Design and Implementation of an Open-Source Security Operations Center for Effective Cyber Threat Detection and Response","msid":"","msnumber":"","nonDraftVersions":[{"code":2,"date":"2025-06-26 14:45:49","doi":"10.21203/rs.3.rs-5795888/v2","editorialEvents":[{"type":"communityComments","content":0}],"status":"published","journal":{"display":true,"email":"[email protected]","identity":"researchsquare","isNatureJournal":false,"hasQc":true,"allowDirectSubmit":true,"externalIdentity":"","sideBox":"","snPcode":"","submissionUrl":"/submission","title":"Research Square","twitterHandle":"researchsquare","acdcEnabled":true,"dfaEnabled":false,"editorialSystem":"","reportingPortfolio":"","inReviewEnabled":false,"inReviewRevisionsEnabled":true}},{"code":1,"date":"2025-01-20 09:28:44","doi":"10.21203/rs.3.rs-5795888/v1","editorialEvents":[{"type":"communityComments","content":0}],"status":"published","journal":{"display":true,"email":"[email protected]","identity":"researchsquare","isNatureJournal":false,"hasQc":true,"allowDirectSubmit":true,"externalIdentity":"","sideBox":"","snPcode":"","submissionUrl":"/submission","title":"Research Square","twitterHandle":"researchsquare","acdcEnabled":true,"dfaEnabled":false,"editorialSystem":"","reportingPortfolio":"","inReviewEnabled":false,"inReviewRevisionsEnabled":true}}],"origin":"","ownerIdentity":"4e2fd23e-8cb0-4131-ba1d-b7cf4f40505b","owner":[],"postedDate":"June 26th, 2025","published":true,"recentEditorialEvents":[],"rejectedJournal":[],"revision":"","amendment":"","status":"posted","subjectAreas":[],"tags":[],"updatedAt":"2025-06-26T14:46:27+00:00","versionOfRecord":[],"versionCreatedAt":"2025-06-26 14:45:49","video":"","vorDoi":"","vorDoiUrl":"","workflowStages":[]},"version":"v2","identity":"rs-5795888","journalConfig":"researchsquare"},"__N_SSP":true},"page":"/article/[identity]/[[...version]]","query":{"redirect":"/article/rs-5795888","identity":"rs-5795888","version":["v2"]},"buildId":"8U1c8b4HqxoKbykW_rLl7","isFallback":false,"isExperimentalCompile":false,"dynamicIds":[84888],"gssp":true,"scriptLoader":[]}
Text is read by the "Ask this paper" AI Q&A widget below. Extraction quality varies by source — PMC NXML preserves structure cleanly, OA-HTML may include some navigation residue, and OA-PDF can have broken hyphenation. The publisher copy (via DOI) is the canonical version.
My notes (saved in your browser only)
Ask this paper
Answers must be backed by verbatim quotes from this paper's full text. Hallucinated quotes are dropped automatically; if no verbatim passage answers the question, we say so. How this works
Citation neighborhood (no data yet)
We don't have any in-corpus citations linked to this paper yet. This is a recent paper (2025) — citers typically take a year or two to land, and the OpenAlex reference graph may still be filling in.
Source provenance
- europepmc
- last seen: 2026-05-20T01:45:00.602351+00:00
- unpaywall
- last seen: 2026-05-29T02:00:03.542394+00:00
License: CC-BY-4.0