Impact Factor
Call For Paper
Volume 12 Issue 07
July 2026
Download Paper Format
Copyright Form
Author(s)
Abstract
The Growing Sophistication Of Cybersecurity Threats Requires A Proactive And Automated Security Strategy. This Paper Discusses The Convergence Of Security Information And Event Management (SIEM) And Security Orchestration, Automation, And Response (SOAR) To Improve Threat Detection, Investigation, And Response. PfSense, An Open-source Firewall With Suricata IDS/IPS, Produces Security Logs That Are Shipped Using Filebeat To Elasticsearch, Creating A Centralized Log Repository For Real-time Threat Analysis. Kibana Is Also Used To Offer Visualization And Dashboards For Incident Tracking. Shuffle SOAR Is Also Used To Automate Incident Response Through The Correlation Of Alerts And The Execution Of Pre-defined Workflows Using PfSense REST API For Automating And Controlling Firewall Rules. The Integration Enhances Accuracy In Detection, Minimizes Response Time, And Improves Operational Efficiency, Thus Enhancing An Organization's Cybersecurity Posture. The Suggested Architecture Takes Advantage Of PfSense As A Firewall And Suricata As An IDS/IPS To Detect Threats By Monitoring Network Traffic. Security Events And Logs Are Sent Through Filebeat To Elasticsearch, Providing Centralized Log Aggregation, Indexing, And Real-time Searching, Enterprises And Organizations Looking For Cost-effective But Efficient Security Automation.
Keywords
Paper ID
IJSARTV11I4103239
Publication Date
April 20, 2025
Research Area
Cyber Security