An Interview Study on Third-Party Cyber Threat Hunting Processes in the U.S. Department of Homeland Security

arXiv:2402.12252v1 Announce Type: new
Abstract: Cybersecurity is a major challenge for large organizations. Traditional cybersecurity defense is reactive. Cybersecurity operations centers keep out adversaries and incident response teams clean up after break-ins. Recently a proactive stage has been introduced: Cyber Threat Hunting (TH) looks for potential compromises missed by other cyber defenses. TH is mandated for federal executive agencies and government contractors. As threat hunting is a new cybersecurity discipline, most TH teams operate without a defined process. The practices …

adversaries arxiv centers challenge cs.cr cs.se cyber cybersecurity cybersecurity defense cyber threat cyber threat hunting defense department department of homeland security homeland security hunting incident incident response interview large major operations organizations party proactive processes response security stage study teams third third-party threat threat hunting traditional cybersecurity u.s. department of homeland security