Вестник Алматинского университета энергетики и связи № 3 (54) 2021
47
ANALYSIS OF MODERN TYPES OF DATABASES FOR USE IN SIEM
SYSTEMS
R. Sh. Berdibayev
1*
, S. O. Gnatyuk
2
, S. Tynymbayev
1
, I.S.Azarov
2
¹NJSC "Almaty University of Energy and Communications named after Gumarbek Daukeev",
Almaty,
Kazakhstan
²National Aviation University, Kyiv, Ukraine
e-mail: r.berdybaev@aues.kz, s.tynymbaev@aues.kz, k.almuratova@aues.kz,sergio.gnatyuk@gmail.com
Abstract.
This article analyzes modern databases and existing types of DBMS. They are used in event and
security incident management systems (SIEM systems) for critical objects of information and communication
infrastructure. They also provide a comparative description of the capabilities and features of databases. During
research 14 common types of databases were analyzed, which were mainly divided into 6 groups. Also, the databases
and their management systems used in 23 existing SIEM systems were investigated. In addition, the databases and their
management systems used in 23 existing SIEM systems were analyzed. The study of databases revealed the need to take
into account the convenience of storage, the speed of searching and using data to select a database when building
SIEM systems, the need to integrate databases with other modules of the SIEM system and external APIs to support
data from different DPI systems. The authors recommend using several hybrid types of databases, such as MySQL and
NoSQL, which allow maintaining the convenience of storing and classifying data, as well as high speed of retrieving
large amounts of information due to pre-indexing.
Достарыңызбен бөлісу: 
