V2X-SIEM: A Lightweight Security Information and Event Management Architecture for Connected and Autonomous Vehicles

The growing complexity of vehicular networks, from the implementation of Vehicle-to-Everything (V2X) communication technologies, poses a significant challenge to traditional Security Information and Event Management (SIEM) systems, which are often inflexible and unable to support timely threat detection in automotive contexts. This paper proposes a modular, lightweight, and open-source architecture for a SIEM system designed for Connected and Autonomous vehicles (CAVs). The proposed architecture is built on Elasticsearch and Kibana, and is configured for low latency, high scalability, and efficient event correlation from vehicular communication protocols. It includes components for event collection, analysis, and visualization, and processes vehicular security events nearly in real time while remaining resource efficient, which makes it suitable for deployment with edge computing. The contributions are demonstrated to have practical implications for vehicle security by bridging the strategies of enterprise SIEM capabilities and the unique demands of intelligent transportation systems.