[HTML][HTML] Understanding situation awareness in SOCs, a systematic literature review

HJ Ofte, S Katsikas - Computers & Security, 2023 - Elsevier
Situation awareness is shown through human factors research to be a valuable construct to
understand and improve how humans perform while operating complex systems in critical …

Vulcon: A system for vulnerability prioritization, mitigation, and management

KA Farris, A Shah, G Cybenko, R Ganesan… - ACM Transactions on …, 2018 - dl.acm.org
Vulnerability remediation is a critical task in operational software and network security
management. In this article, an effective vulnerability management strategy, called VULCON …

A novel team formation framework based on performance in a cybersecurity operations center

A Shah, R Ganesan, S Jajodia, H Cam… - IEEE Transactions …, 2023 - ieeexplore.ieee.org
A Cybersecurity Operations Center (CSOC) performs various tasks to protect an
organization from cyber threats. Several types of personnel collaborate to function effectively …

A Machine Learning and Optimization Framework for Efficient Alert Management in a Cybersecurity Operations Center

J Ghadermazi, A Shah, S Jajodia - Digital Threats: Research and …, 2024 - dl.acm.org
Cybersecurity operations centers (CSOCs) protect organizations by monitoring network
traffic and detecting suspicious activities in the form of alerts. The security response team …

Cyber trust index: A framework for rating and improving cybersecurity performance

S Malaivongs, S Kiattisin, P Chatjuthamard - Applied Sciences, 2022 - mdpi.com
Background Cybersecurity risk is among the top risks that every organization must consider
and manage, especially during this time wherein technology has become an integral part of …

Understanding tradeoffs between throughput, quality, and cost of alert analysis in a CSOC

A Shah, R Ganesan, S Jajodia… - IEEE Transactions on …, 2018 - ieeexplore.ieee.org
Intrusion detection systems (IDSs) analyze data that are collected by sensors, which monitor
the network traffic. Any alert generated by the IDS is transmitted to a cybersecurity …

Saibersoc: Synthetic attack injection to benchmark and evaluate the performance of security operation centers

M Rosso, M Campobasso, G Gankhuyag… - Proceedings of the 36th …, 2020 - dl.acm.org
In this paper we introduce SAIBERSOC, a tool and methodology enabling security
researchers and operators to evaluate the performance of deployed and operational …

[HTML][HTML] Technical performance metrics of a security operations center

J Forsberg, T Frantti - Computers & Security, 2023 - Elsevier
This research introduces a novel framework for creating metrics intended for security
operations centers (SOCs). The framework is developed using the design science research …

SAIBERSOC: A Methodology and Tool for Experimenting with Security Operation Centers

M Rosso, M Campobasso, G Gankhuyag… - Digital Threats: Research …, 2022 - dl.acm.org
In this article, we introduce SAIBERSOC (Synthetic Attack Injection to Benchmark and
Evaluate the Performance of Security Operation Centers), a tool and methodology enabling …

A methodology for ensuring fair allocation of CSOC effort for alert investigation

A Shah, R Ganesan, S Jajodia - International Journal of Information …, 2019 - Springer
Abstract A Cyber Security Operations Center (CSOC) often sells services by entering into a
service level agreement (SLA) with various customers (organizations) whose network traffic …