Enhanced Training for Cyber Situational Awareness
Enhanced Training for Cyber Situational Awareness
复制标题
加强网络态势感知培训
DOI：
--
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
Chris Forsythe
中科院分区：
文献类型：
--
作者：
Susan M. Stevens;A. Carbajal;Austin Silva;Kevin Nauer;Benjamin Anderson;Theodore Reed;Chris Forsythe
在一项研究中，参与者接受了基于工具或基于叙述的培训，然后完成了与网络安全威胁相关的挑战。成立了三个小组：（1）基于工具，每个参与者接受基于工具的培训;（2）基于叙述，每个参与者接受基于叙述的培训;（3）组合，其中三名参与者接受基于工具的培训，两名接受基于叙述的培训。结果表明，基于叙事的团队认识到事件之间的时空关系，并构建了一个时间轴，这是一个合理的近似地面真相。相比之下，联合团队产生了一个线性事件序列，不包括不同对手之间的关系。最后，基于工具的团队对事件之间的空间或时间关系表现出很少的赞赏。这些研究结果表明，接受基于叙述的培训的参与者能够使用软件工具的方式，使他们获得更高水平的情况意识。
A study was conducted in which participants received either tool-based or narrative-based training and then completed challenges associated with network security threats. Three teams were formed: (1) Tool-Based, for which each participant received tool-based training; (2) Narrative-Based, for which each participant received narrative-based training and (3) Combined, for which three participants received tool-based training and two received narrative-based training. Results showed that the Narrative-Based team recognized the spatial-temporal relationship between events and constructed a timeline that was a reasonable approximation of ground truth. In contrast, the Combined team produced a linear sequence of events that did not encompass the relationships between different adversaries. Finally, the Tool-Based team demonstrated little appreciation of either the spatial or temporal relationships between events. These findings suggest that participants receiving Narrative-Based training were able to use the software tools in a way that allowed them to gain a greater level of situation awareness.