Real-Time Security Context Awareness in Multifactor Authentication using Wazuh SIEM

In the current cybersecurity environment 16 billion of the customer passwords of various platforms were leaked, and therefore the traditional methods of authorization, which are passwords, can no longer be considered reliable. In this study, a new integration of Multifactor Authentication (MFA) is proposed to integrated with Wazuh SIEM to provide a context-aware authentication that is responsive to the dynamic threat environment. This system leverages the time based security that MFA with PyOTP offers but with the benefit of jury based detection in the form of log analytics and anomaly detection that Wazuh offers. The system also skyrockets access control, sends notifications in real-time and has forensics capability through interactive dashboards. This architecture has shown to provide a significant boost to resilience in the areas of brute-force attacks, phishing, session hijacking and unauthorized access, according to our findings