@inbook{961638dd376f4aad8f02e61465d0e0e2,
title = "Retrieval of relevant historical data triage operations in security operation centers",
abstract = "Triage analysis is a fundamental stage in cyber operations in Security Operations Centers (SOCs). The massive data sources generate great demands on cyber security analysts{\textquoteright} capability of information processing and analytical reasoning. Furthermore, most junior security analysts perform much less efficiently than senior analysts in deciding what data triage operations to perform. To help (junior) analysts perform better, several retrieval methods have been proposed to facilitate data triaging through retrieval of the relevant historical data triage operations of senior security analysts. This paper conducts a review of the existing retrieval methods, including rule-based retrieval and context-based retrieval of data triage operations. It further discusses the new directions in solving the data triage operation retrieval problem.",
author = "Tao Lin and Chen Zhong and John Yen and Peng Liu",
note = "Publisher Copyright: {\textcopyright} Springer Nature Switzerland AG 2018.",
year = "2018",
doi = "10.1007/978-3-030-04834-1_12",
language = "English (US)",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "227--243",
booktitle = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
address = "Germany",
}