In the aftermath of cybersecurity incidents within organizations, explanations of their causes
often revolve around isolated technical or human events such as an Advanced Persistent …

The increasing use of Security Operations Centers (SOCs) by organisations as a part of their
cyber security strategy has led to several studies aiming to understand and improve SOC …

Since the introduction of Security Operations Centers (SOCs) around 15 years ago, their
importance has grown significantly, especially over the last five years. This is mainly due to …

In this work, we focus on the prevalence of False Positive (FP) alarms produced by security
tools, and Security Operation Centers (SOCs) practitioners' perception of their quality. In an …

Organizations, such as companies and governments, created Security Operations Centers
(SOCs) to defend against computer security attacks. SOCs are central defense groups that …

Analysts who work in a Security Operations Centre (SOC) play an essential role in
supporting businesses to protect their computer networks against cyber attacks. To manage …

Data triage is a fundamental stage of cyber defense analysis for achieving cyber situational
awareness in a Security Operations Center (SOC). It has a high requirement for cyber …

Traditionally, network and security operation center teams have worked in silos despite
commonalities. The network operating center (NOC) team is to provide operationality and …

This article applies the concept of ritual to cybersecurity expertise, beginning with the
cybersecurity “skills gap”: the perceived lack of suitably qualified professionals necessary to …

Security Operations Centers (SOCs) face the key challenge of handling excessive security
alerts. While existing works have studied this problem qualitatively via user studies, there is …