Optimizing Alert Data Management Processes at a Cyber Security Operations Center

Author(s):  
Rajesh Ganesan ◽  
Ankit Shah ◽  
Sushil Jajodia ◽  
Hasan Cam
Author(s):  
Ankit Shah ◽  
Katheryn A. Farris ◽  
Rajesh Ganesan ◽  
Sushil Jajodia

Vulnerabilities are security flaws in software and network systems that criminal hackers can exploit to gain an asymmetric advantage. Cyber-Security Operations Centers must routinely triage and patch vulnerabilities in their system(s) to minimize external exposure to attackers. The personnel resources required to address vulnerability remediation tasks are limited and constrained, thus motivating the need for optimization approaches to improve the efficiency of the vulnerability selection process. This paper investigates two different approaches to vulnerability selection for mitigation through (a) Individual Attribute Value Optimization and (b) Multiple Attribute Value Optimization. The former approach presents a methodology that optimizes the selection of vulnerabilities for mitigation with respect to an individual attribute, while the latter approach considers multiple attributes in the vulnerability selection decision-making. Real scan data from a Cyber-Security Operations Center are used to compare the results between the two mathematical approaches. Furthermore, comparisons are made with the results obtained from (a) the actual (baseline) Cyber-Security Operations Center performance, and (b) a vulnerability prioritization algorithm called VULCON that appeared in recent literature.


2018 ◽  
Vol 24 (1) ◽  
pp. 75-88 ◽  
Author(s):  
Georgette Hlepas ◽  
Vanessa Bateman

Abstract The U.S. Army Corps of Engineers (USACE) maintains a lessons-learned goal for all major projects to capture knowledge gained. The focus of the formal lessons-learned process is to share knowledge and experience nationwide improving USACE contracting methodologies, reducing overall costs, and improving designs. This continuous improvement can be seen in the evolution of USACE barrier wall construction designs and contracting methods. From the first Wolf Creek Dam barrier wall installed in the 1970s to the more recent Bolivar and East Branch Dam barrier wall projects, documentation and sharing of lessons learned in areas such as grouting, data management, and quality assurance procedures have increased the efficiency and effectiveness of barrier wall designs, monitoring, and contract specifications. Contractual philosophy, use of pre-grouting treatment, verification methods, and data management processes have all changed due to lessons learned and have enabled the USACE to improve the overall end product of barrier wall projects.


2019 ◽  
Vol 2 ◽  
pp. 1-8
Author(s):  
Chih-Wei Chen ◽  
Ching-Yi Lin ◽  
Chine-Hung Tung ◽  
Hsiung-Ming Liao ◽  
Jr-Jie Jang ◽  
...  

<p><strong>Abstract.</strong> Since UN announced 17 SDGs in 2015, many countries around the world have been endeavouring to promote SDGs towards building a sustainable future. Given the disparity of the regional development, national government is suggested to establish localised sustainable vision. Drawing on UN SDGs with targets and corresponding indicators, meanwhile considering local circumstances and sustainable vision, government further seeks to establish localised SDGs with related targets and indicators. Meanwhile, under the digital era, digital technologies have been extensively employed as the smart tool in many fields nowadays, and Geographic Information System (GIS) has been developed as the platform to visualise the SDGs progress in UN and many countries. On the above basis, this paper further demonstrates Taiwan’s efforts to establish localised SDGs, and develop National Geographic Information System (NGIS) to implement the sustainable development in Taiwan, monitor the SDGs progress, and provide feedback to policymakers to further make strategic policies in a top-down approach, meanwhile develop Community Geographic Information System (CGIS) to encourage stakeholders and citizens to harness the concept of CGIS to proactively create and tell their own stories and promote Regional Revitalisation policy in a bottom-up approach. Moreover, GIS could not function well without appropriate data management including massive data and open data policy, well-built digital infrastructure, as well as the selected “right data” and cyber security. Hence, with appropriate data management, GIS as a smart tool could facilitate the promotion and implementation of SDGs in an intuitive manner towards shaping a smart and sustainable future.</p>


Sign in / Sign up

Export Citation Format

Share Document