THE HUMAN FACTOR CAPABILITIES IN SECURITY OPERATION CENTER (SOC)
THE HUMAN FACTOR CAPABILITIES IN SECURITY OPERATION CENTER (SOC)
复制标题
安全运营中心 (SOC) 中的人为因素能力
DOI：
--
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Noreddine Gherabi
中科院分区：
文献类型：
--
作者：
Samir Achraf Chamkar;Yassine Maleh;Noreddine Gherabi
摘要人的因素被认为是网络安全和安全运营中心（SOC）内部最薄弱的环节，同时也是最重要的组成部分。人为因素的能力和挑战吸引了研究人员的注意力，以解决如何减少或减轻这些挑战。然而，这些研究论文没有考虑SOC系统的复杂性，不可预测性，相互依赖性和不断发展的性质。本研究旨在探讨安保行动中心内部的人力能力和弱点。为此，我们采用了调查问卷，以及SOC分析师的日常观察和SOC专家的访谈。40名SOC分析师和5名专家进行了调查。本研究的结果将有助于SOC管理人员和SOC设计人员更好地了解SOC分析师所面临的挑战，并考虑到安全运营中心的相互依赖和不断发展的性质。
Abstract The human factor is considered the weakest link in cybersecurity and inside the Security Operation Centers (SOC) and it represents the most important component at the same time. Human factor capabilities and challenges attracted the attention of researchers to address how these challenges can be reduced or mitigated. However, these research papers do not consider the complexity, unpredictability, interdependent and evolving nature of the SOC systems. This study aims to explore the human capabilities and weaknesses inside the Security Operation Centre. To this end, we employed survey bases questionaries alongside the daily observation of SOC analysts and interviews with SOC experts. Forty SOC analysts and five experts conducted the survey. The finding of this study will help SOC managers and SOC designers better understand the challenges faced by the SOC analysts and take into account the interdependent and evolving nature of the Security Operation Centers.