Hello everyone,
I’m a cybersecurity engineering student at BHOS, and my team is currently in the final stage of the TEKNOFEST Blockchain Competition.
Our project focuses on SIEM log integrity. We have built a working prototype around independently recording the integrity of historical SIEM data, so that specific time periods can later be checked against their previously recorded state.
We have already tested the concept with a free SIEM, and while developing it we became interested in how this kind of additional integrity layer would fit into a real OpenSearch/Security Analytics environment.
We are not trying to claim that OpenSearch is missing a security control, and I also don’t want to post the full architecture publicly while the competition is ongoing. What we are looking for is feedback from people who work with OpenSearch/Security Analytics on whether they think the idea is useful, what limitations they see, and whether there are use cases we may have overlooked.
Our competition final is on September 30, so we have a fairly short timeframe. I would be very happy to briefly present the project privately to anyone from the OpenSearch/Security Analytics community who is interested and hear their thoughts.
Thank you!