Organizations use diverse types of security solutions to prevent cyberattacks. Multiple vendors provide security solutions developed using heterogeneous technologies and paradigms. Hence, it is a challenging rather impossible to easily make security solutions to work an integrated fashion. Security orchestration aims at smoothly integrating multivendor security tools that can effectively and efficiently interoperate to support security staff of a Security Operation Centre (SOC). Given the increasing role and importance of security orchestration, there has been an increasing amount of literature on different aspects of security orchestration solutions. However, there has been no effort to systematically review and analyze the reported solutions. We report a Multivocal Literature Review that has systematically selected and reviewed both academic and grey (blogs, web pages, white papers) literature on different aspects of security orchestration published from January 2007 until July 2017. The review has enabled us to provide a working definition of security orchestration and classify the main functionalities of security orchestration into three main areas: unification, orchestration, and automation. We have also identified the core components of a security orchestration platform and categorized the drivers of security orchestration based on technical and socio-technical aspects. We also provide a taxonomy of security orchestration based on the execution environment, automation strategy, deployment type, mode of task and resource type. This review has helped us to reveal several areas of further research and development in security orchestration.
Building Privacy-and-Security-Focused Federated Learning Infrastructure for Global Multi-Centre Healthcare Research
University of Cambridge（剑桥大学）；Precision Health University Research Institute, Queen Mary University of London（伦敦大学女王玛丽学院精准健康大学研究所）；Department of Medicine, University of Cambridge（剑桥大学医学系）；Flower Labs（Flower实验室）；Department of Computer Science and Technology, University of Cambridge（剑桥大学计算机科学与技术系）；PharosAI；Cancer Bioinformatics, School of Cancer & Pharmaceutical Sciences, Faculty of Life Sciences and Medicine, King’s College London（伦敦国王学院生命科学与医学院癌症与药学科学学院癌症生物信息学）；Department of Computing and Mathematics, South East Technological University（东南理工大学计算与数学系）；Royal London Hospital, Barts Health NHS Trust（皇家伦敦医院，巴茨健康NHS信托）
Securing Multi-Agent GIS Systems: Risk Evaluation and Prompt Hardening Optimization
Department of Systems Design Engineering, University of Waterloo（系统设计工程系，滑铁卢大学）；Department of Mechatronics Engineering, University of Waterloo（机电工程系，滑铁卢大学）；Department of Geomatics Engineering, University of Calgary（测绘工程系，卡尔加里大学）；Department of Geography and Environmental Management, University of Waterloo（地理与环境管理系，滑铁卢大学）
Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines
Department of Computer Science, University of Texas at El Paso（德克萨斯理工大学计算机科学系）；School of Computing, Southern Illinois University Carbondale（南方伊利诺伊大学卡本代尔分校计算机学院）；Hanyang University（翰阳大学）；University of Illinois Urbana-Champaign（伊利诺伊大学厄巴纳-香槟分校）
