了解安全运营中心的决策:为网络欺骗技术建立案例
Andrew Reeves1, Debi Ashenden1
1Defence & Security Institute, University of Adelaide, Adelaide, SA, Australia.
Frontiers in psychology
|June 9, 2023
概括
网络欺骗技术可以通过浪费攻击者资源来帮助安全操作中心 (SOC),但它的采用是有限的. 了解SOC分析师的决策是有效实施的关键.
科学领域:
- 网络安全 网络安全
- 人与计算机的交互
背景情况:
- 安全操作中心 (SOC) 在极大的时间压力下检测和应对网络威胁至关重要.
- 网络欺骗技术提供了一种通过消耗攻击者资源来延长响应时间的方法,但目前尚未充分利用.
研究的目的:
- 在SOC中识别有效实施网络欺骗技术的障碍.
- 探索如何理解分析师的决策可以提高网络欺骗的有效性.
主要方法:
- 专家采访进行,以收集见解.
- 对面试数据进行了主题分析.
主要成果:
- 主要障碍包括缺乏使用案例,有效性的经验证据有限,不愿积极防御,供应商承诺过多,以及担心扰乱分析师决策.
- 网络欺骗技术是有前途的,但面临着重大实施障碍.
结论:
- 自然主义决策 (NDM) 提供了一个框架,以更好地了解SOC分析师的决策过程.
- 利用NDM可以优化SOC环境中的网络欺骗技术的整合和有效性.
更多相关视频
05:48The Adventures of Fundi Intervention Based on the Cognitive and Emotional Processing in Attention Deficit Hyperactive Disorder Patients
Published on: June 12, 2020
5.8K
07:05Operant Protocols for Assessing the Cost-benefit Analysis During Reinforced Decision Making by Rodents
Published on: September 10, 2018
6.0K
相关概念视频
Decision Making
152
Decision-making is a fundamental cognitive process that involves evaluating alternatives and selecting among them. This process can range from simple choices, such as deciding what to wear, to complex decisions, like choosing a major in college or a career path. The complexity of the decision often dictates the approach we use, which can be broadly categorized into two types: automatic and controlled decision-making.
Automatic decision-making is fast, intuitive, and relies on gut feelings...
Automatic decision-making is fast, intuitive, and relies on gut feelings...
152
Decision Making: Traditional Method
4.1K
The process of hypothesis testing based on the traditional method includes calculating the critical value, testing the value of the test statistic using the sample data, and interpreting these values.
First, a specific claim about the population parameter is decided based on the research question and is stated in a simple form. Further, an opposing statement to this claim is also stated. These statements can act as null and alternative hypotheses, out of which a null hypothesis would be a...
First, a specific claim about the population parameter is decided based on the research question and is stated in a simple form. Further, an opposing statement to this claim is also stated. These statements can act as null and alternative hypotheses, out of which a null hypothesis would be a...
4.1K
Introduction to Cognitive Psychology
547
Cognitive psychology is the field of psychology dedicated to examining how people think. It attempts to explain how and why we think the way we do by studying the interactions among human thinking, emotion, creativity, language, and problem-solving, as well as other cognitive processes. Cognitive psychology studies how information is processed and manipulated in remembering, thinking, and knowing.
This field emerged in the mid-20th century, following a period dominated by behaviorism, which...
This field emerged in the mid-20th century, following a period dominated by behaviorism, which...
547
Deindividuation
26.5K
Deindividuation is a form of social influence on an individual’s behavior such that the individual engages in unusual or non-normal behavior while in a group setting. Why? Because in these group settings, the individual no longer sees themselves as an individual anymore, disinhibiting their behavior and personal restraint.
26.5K
Cognitive Dissonance
32.7K
Social psychologists have documented that feeling good about ourselves and maintaining positive self-esteem is a powerful motivator of human behavior (Tavris & Aronson, 2008). In the United States, members of the predominant culture typically think very highly of themselves and view themselves as good people who are above average on many desirable traits (Ehrlinger, Gilovich, & Ross, 2005). Often, our behavior, attitudes, and beliefs are affected when we experience a threat to our...
32.7K
Decision Making: P-value Method
5.5K
The process of hypothesis testing based on the P-value method includes calculating the P- value using the sample data and interpreting it.
First, a specific claim about the population parameter is proposed. The claim is based on the research question and is stated in a simple form. Further, an opposing statement to the claim is also stated. These statements can act as null and alternative hypotheses: a null hypothesis would be a neutral statement while the alternative hypothesis can...
First, a specific claim about the population parameter is proposed. The claim is based on the research question and is stated in a simple form. Further, an opposing statement to the claim is also stated. These statements can act as null and alternative hypotheses: a null hypothesis would be a neutral statement while the alternative hypothesis can...
5.5K
