SOUPS 2023 - 'Give Me Structure': Synthesis and Evaluation of a (Network) Threat Analysis Process...

SOUPS 2023 - 'Give Me Structure': Synthesis and Evaluation of a (Network) Threat Analysis Process Supporting Tier 1 Investigations in a Security Operation Center

Leon Kersten, Tom Mulders, Emmanuele Zambon, Chris Snijders, and Luca Allodi, Eindhoven University of Technology

Current threat analysis processes followed by tier-1 (T1) analysts in a Security Operation Centers (SOC) rely mainly on tacit knowledge, and can differ greatly across analysts. The lack of structure and clear objectives to T1 analyses contributes to analyst burnout, makes …

analysis center chris current evaluation investigations network process processes security security operation structure technology threat threat analysis university