In 2019, cyber security is considered one of the most significant threats to the global
economy and national security. Top US agencies have acknowledged this fact, and …

Computer security incident response is a complex socio-technical environment that provides
first line of defense against network intrusions, but struggles to obtain and keep qualified …

Incident response is an area within cyber defense that is responsible for detecting,
mitigating, and preventing threats within a given network. Like other areas of cyber security …

This study presents a novel framework leveraging the potential of Artificial Intelligence (AI) in
enhancing the efficacy of Computer Security Incident Response Teams (CSIRTs). It …

Presently, cyber defense heavily relies on human network analysts who must detect and
investigate potential suspicious activity, a demanding, fatiguing process that takes a heavy …

The continuous integration of automated tools into security operation centers (SOCs)
increases the volume of alerts for security analysts. This amplifies the risk of automation bias …

This special issue will give you a greater understanding of what CSIRTs are and how they
work. For the security researcher, these articles highlight challenges faced by operational …

We review practical advice on decision-making during computer security incident response.
Scope includes standards from the IETF, ISO, FIRST, and the US intelligence community. To …

Cyber security increasingly focuses on the challenges faced by network defenders. Cultural
and security-driven sentiments about external observation, as well as publication concerns …

Cyber Threat Intelligence (CTI) is threat information intended for security purposes.
However, use for incident response demands standardization. This study examines the …