Triage analysis is a fundamental stage in cyber operations in Security Operations Centers
(SOCs). The massive data sources generate great demands on cyber security analysts' …

Data triage is a fundamental stage of cyber defense analysis for achieving cyber situational
awareness in a Security Operations Center (SOC). It has a high requirement for cyber …

Security operations centers (SOCs) employ various cyber defend measures to monitor
network events. Apart from these measures, SOCs also have to resort to human analysts to …

Cyber defense analysts are playing a critical role in Security Operations Centers (SOCs) to
make sense of the immense amount of network monitoring data for detecting and …

Efficiency and interference shielding are critical factors for conducting successful cognitive
task analysis (CTA) of cyber-attack analysis. To achieve this goal, a tool, named ARSCA, is …

Cyber Security Operations Centers (CSOCs) have been widely built in organizations for
intrusion detection and incident response. Cyber security analysts play a critical role in …

In this chapter, we provide an overview of Cyber Situational Awareness, an emerging
research area in the broad field of cyber security, and discuss, at least at a high level, how to …

Although many building blocks of today's cyber-defense solutions are already fully
automatic, there is still a debate on whether next-generation cyber-defense solutions should …

The previous chapter showed that our understanding about the cognitive reasoning process
of cyber analysts is rather limited. Here, we focus on ways to close this knowledge gap. This …

Computational situation assessment (SA) systems support human control center operators
in situation monitoring, ie, detecting and tracking relevant object and event constellations in …