A Formalised Approach to Designing Sonification Systems for Network−Security Monitoring
A Formalised Approach to Designing Sonification Systems for Network−Security Monitoring
复制标题
设计用于网络安全监控的语音系统的形式化方法
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Jason R. C. Nurse
中科院分区：
文献类型：
--
作者：
Louise Axon;Jason R. C. Nurse
通过声音表示数据的声化系统有可能在安全运营中心（SOC）的许多网络安全监控应用中发挥作用。在SOC中工作的安全分析师通常使用异常检测技术、入侵检测系统和以视觉和文本形式呈现的数据的组合来监视网络。在过去的二十年中，在开发新型声化系统以进一步支持网络监测任务方面取得了重大进展，但其中许多系统尚未得到充分验证，并且缺乏SOC的吸收。此外，对网络数据的有声化设计要求几乎没有指导。在本文中，我们确定的关键作用，发音，如果正确实施，可以发挥在解决传统的网络监控方法的缺点。在回顾以往研究的基础上，我们提出了一种方法来开发网络监控的发声系统。这种方法涉及到在这个空间中设计sonification的模型的形式化;识别适合实时网络监控的sonification设计美学;以及通过全面的用户测试进行系统改进和验证。作为该系统开发的第一步，我们提出了一个正式的模型，用于设计网络安全监控的sonifications。该模型的应用是通过我们的原型声化系统的两个不同的用例在网络安全监控的发展。
Sonification systems, in which data are represented through sound, have the potential to be useful in a number of network-security monitoring applications in Security Operations Centres (SOCs). Security analysts working in SOCs generally monitor networks using a combination of anomaly-detection techniques, Intrusion Detection Systems and data presented in visual and text-based forms. In the last two decades significant progress has been made in developing novel sonification systems to further support network-monitoring tasks, but many of these systems have not been sufficiently validated, and there is a lack of uptake in SOCs. Furthermore, little guidance exists on design requirements for the sonification of network data. In this paper, we identify the key role that sonification, if implemented correctly, could play in addressing shortcomings of traditional network-monitoring methods. Based on a review of prior research, we propose an approach to developing sonification systems for network monitoring. This approach involves the formalisation of a model for designing sonifications in this space; identification of sonification design aesthetics suitable for realtime network monitoring; and system refinement and validation through comprehensive user testing. As an initial step in this system development, we present a formalised model for designing sonifications for network-security monitoring. The application of this model is demonstrated through our development of prototype sonification systems for two different use-cases within network security monitoring.