The catalogue of the Restena Foundation’ services include thirty services divided into four categories: email, hosting, network, .lu and computer security. It is in this last category that Restena has implemented its new service: a Security Information and Event Management (SIEM).
Essential, tailor-made protection
The SIEM is an additional tool designed for institutions connected to the Luxembourg research and education network; the RESTENA network, which it has been managing since its inception. By integrating an IT security event management system at the heart of their IT network, organisations can analyse security alerts generated by the components of their information systems and thereby detect and analyse IT security incidents occurring on their network (attacks on IT systems, data breaches, manipulation of information, etc.)
With the SIEM, organisations are fully equipped to prevent their infrastructure, systems and data from being compromised, and to deal with the consequences: financial losses, damage to reputation, service outages, etc. This makes the protection all the more effective, as the SIEM was entirely built by the Restena Foundation’s teams, in close collaboration with several representatives from the research and education community in Luxembourg: Luxembourg Institute of Health (LIH), Lycée Guillaume Kroll and its BTS Cybersecurity section, University of Luxembourg, Luxembourg Institute of Socio-Economic Research (LISER) and the Centre de gestion informatique de l'éducation (CGIE).
A sovereign, open-source system
The SIEM is the second service developed by Restena as part of the European research project ‘Enhancing Cybersecurity Services for the Luxembourgish Research and Education community’ (LuCySe4RE) led by Restena from 2023 to 2026. In early 2025, a ‘DNS firewall’ service enabling research and education institutions to protect their IT networks was also launched as part of the LuCySe4RE project. Combining these two so-called proactive services – that is, those designed to prevent incidents and minimise their impact when they do occur – is, in fact, widely recommended as the best way to protect an organisation’s information systems.
Its implementation followed the guiding principle common to all technical developments carried out by Restena teams. The SIEM was designed to meet two main requirements : use of open-source technologies and data hosting within the country. SIEM’s technical infrastructure is not only flexible and secure, but also sovereign and entirely controlled and managed by the Restena Foundation’s teams.
Institutions connected to the RESTENA network - research institutes, educational and cultural institutions in Luxembourg - willing to benefit from the SIEM can notify their interest to noc@restena.lu
