MODERN TECHNOLOGIES FOR NETWORK SECURITY MONITORING: THE ROLE OF SIEM WAZUH IN THREAT DETECTION AND RESPONSE

Abstract

In today’s digital environment, the proliferation of network resources and devices makes them attractive to cybercriminals. The increasing sophistication of attacks such as DDoS, data breaches, malware and phishing calls for new approaches to cyber defense. A particular difficulty is the protection of large corporate and cloud infrastructures, where volumes of data require automation to detect threats and respond to them.One of the solutions is the implementation of SIEM systems, in particular the open platform Wazuh, which provides security monitoring, event management and analytics. Its functionality includes file integrity monitoring, event correlation, regulatory compliance, and behavioral analysis for real-time threat prevention. Its advantages, practical effectiveness and possibilities of integration with other security components are analyzed. In the process of the research, practical testing of Wazuh, analysis of the functionality of the threat detection system, response automation and compliance with regulatory requirements was carried out. Integration with other tools, such as Suricata’s IDS, allowed detection of complex multi-stage attacks and reduced response time.Testing showed threat detection accuracy of up to 98% and a low rate of false positives.Wazuh’s automation functionality has reduced incident response time to 1-2 minutes. The system demonstrated stable operation in large networks and the possibility of integration into cloud environments. Wazuh has also proven itself to be competitive against commercial solutions such as IBM QRadar due to its open source, customization flexibility and cost-effectiveness.The Wazuh SIEM system is an effective tool for ensuring network security in today’s cyberspace.Open architecture and wide functionality make it relevant both for large organizations and for small businesses that seek to reduce the risks of cyberattacks at minimal financial costs.