arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1807.06706cs.HCcs.CRcs.SDeess.AS
收藏

安全运营中心的声音化:安全从业人员怎么想?

Sonification in security operations centres: what do security practitioners think?

University of Oxford(牛津大学)

Louise M. Axon, Bushra Alahmadi, Jason R. C. Nurse, Michael Goldsmith, Sadie Creese

摘要:

在安全运营中心(SOC)中,安全从业人员使用一系列工具来检测和缓解恶意计算机网络活动。声音化,其中数据表示为声音,据说有潜力作为解决SOC面临的一些独特挑战的方法。例如,超声处理已被证明能够实现对过程的外围监控,这可以帮助从业者在繁忙的SOC中进行多任务处理。然而,安全从业人员将声音化纳入其实际工作环境的观点尚未得到研究。因此,本文的目的是通过探索在SOC中使用发声的态度来解决这一差距。我们报告的研究结果,包括一个在线调查(N=20)和采访(N=21)与安全从业人员在一系列不同的SOC工作。我们的贡献是一个精致的欣赏的情况下,发音可以帮助SOC的工作实践,并了解在哪些领域发音可能不是有益的,甚至可能是problem.We还分析了设计的发音系统的关键要求,并将其集成到SOC设置。我们的研究结果澄清了对引入声化以支持在这个重要的安全监控环境中工作的潜在好处和挑战的见解。

英文摘要:

In Security Operations Centres (SOCs) security practitioners work using a range of tools to detect and mitigate malicious computer-network activity. Sonification, in which data is represented as sound, is said to have potential as an approach to addressing some of the unique challenges faced by SOCs. For example, sonification has been shown to enable peripheral monitoring of processes, which could aid practitioners multitasking in busy SOCs. The perspectives of security practitioners on incorporating sonification into their actual working environments have not yet been examined, however. The aim of this paper therefore is to address this gap by exploring attitudes to using sonification in SOCs. We report on the results of a study consisting of an online survey (N=20) and interviews (N=21) with security practitioners working in a range of different SOCs. Our contribution is a refined appreciation of the contexts in which sonification could aid in SOC working practice, and an understanding of the areas in which sonification may not be beneficial or may even be problematic.We also analyse the critical requirements for the design of sonification systems and their integration into the SOC setting. Our findings clarify insights into the potential benefits and challenges of introducing sonification to support work in this vital security-monitoring environment.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑