idsNETS: An experimental platform to study situation awareness for intrusion detection analysts

Vincent F. Mancuso, Dev Minotra, Nicklaus Giacobe, Michael McNeese, Michael Tyworth

Research output: Chapter in Book/Report/Conference proceedingConference contribution

20 Scopus citations

Abstract

In this paper we present a new human-in-the-loop simulation designed to help better understand the role of the human in a cyber-analysis task. Based on qualitative research, previous literature within cyber security, and our experience creating simulations, we built a new system, idsNETS, which is capable of simulating both the environment and data that is present in a cyber-security intrusion detection task. This simulation, which is the first built upon the NeoCITIES Experimental Task Simulator (NETS), was implemented to mimic the task of an intrusion detection analyst. From this work, we present an overview of the scaled-world definitions, the NETS Simulation Engine, and the Simulation User Interface, as well as discuss how this simulation can be leveraged to measure situation awareness in cyber security. Finally we discuss the future research that the idsNETS system will enable us to conduct.

Original languageEnglish (US)
Title of host publication2012 IEEE International Multi-Disciplinary Conference on Cognitive Methods in Situation Awareness and Decision Support, CogSIMA 2012
Pages73-79
Number of pages7
DOIs
StatePublished - 2012
Event2012 IEEE International Multi-Disciplinary Conference on Cognitive Methods in Situation Awareness and Decision Support, CogSIMA 2012 - New Orleans, LA, United States
Duration: Mar 6 2012Mar 8 2012

Publication series

Name2012 IEEE International Multi-Disciplinary Conference on Cognitive Methods in Situation Awareness and Decision Support, CogSIMA 2012

Other

Other2012 IEEE International Multi-Disciplinary Conference on Cognitive Methods in Situation Awareness and Decision Support, CogSIMA 2012
Country/TerritoryUnited States
CityNew Orleans, LA
Period3/6/123/8/12

All Science Journal Classification (ASJC) codes

  • Information Systems and Management

Fingerprint

Dive into the research topics of 'idsNETS: An experimental platform to study situation awareness for intrusion detection analysts'. Together they form a unique fingerprint.

Cite this