Proposta de implementação de um Security Operation Center para a Universidade Eduardo Mondlane: Faculdade de Engenharia

Abstract

This paper proposes a project encompassing an information security proposal aimed at strengthening the mechanisms for protection, detection, and incidence responce, ensuring greater resilience to the FEUEM information technology infrastructure. This research was developed using different methodologies. A descriptive methodology was employed, seeking to analyze vulnerabilities, gaps, and difficulties faced, through the collection of data obtained via interviews and participant observation. A qualitative methodology was also used, aiming to understand the concepts related to cybersecurity in the context of academic reality. The case study methodology was applied because it is an investigation carried out in a real and specific context, allowing the identification of particularities of the scenario studied at the Faculdade de Engenharia. Finally, a bibliographic methodology was adopted, considering all the materials involved in the critical construction with scientific rigor, such as books and articles, that supported the author's interpretation of the topic under analysis. The study revealed that Faculdade de Engenhariahas significant weaknesses in the area of information security, lacking security monitoring and incident response. It was found that implementing a SIEM/SOC platform would substantially improve the robustness of security on-site.