Socio-Technical SIEM (ST-SIEM)-Reference-Cited by-同舟云学术

Socio-Technical SIEM (ST-SIEM)

Published:2021 Issue: Volume: Page:189-203
ISSN:
Container-title:Research Anthology on Artificial Intelligence Applications in Security
language:
Short-container-title:

Author:

AlSabbagh Bilal¹,Kowalski Stewart²

Affiliation:

1. Department of Computer and Systems Sciences, Stockholm University, Stockholm, Sweden

2. Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gjøvik, Norway

Abstract

This article discusses the design and specifications of a Socio-Technical Security Information and Event Management System (ST-SIEM). This newly-developed artifact addresses an important limitation identified in today incident response practice—the lack of sufficient context in actionable security information disseminated to constituent organizations. ST-SIEM tackles this limitation by considering the socio-technical aspect of information systems security. This concept is achieved by correlating the technical metrics of security warnings (which are generic in nature, and the sources of which are sometimes unknown) with predefined social security metrics (used for modeling the security culture of constituent organizations). ST-SIEM, accordingly, adapts the risk factor of the triggered security warning based on each constituent organization security culture. Moreover, the artifact features several socio-technical taxonomies with an impact factor to support organizations in classifying, reporting, and escalating actionable security information. The overall project uses design science research as a framework to develop the artifact.

Publisher

IGI Global

Reference23 articles.

1. Incident response teams – Challenges in supporting the organisational security function

2. AlienVault. (2014). SIEM for Beginners. Retrieved from https://www.alienvault.com/ resource-center/white-papers/siem-for-beginners

3. A cultural adaption model for global cyber security warning systems.;B.Alsabbagh;Proceedings of 5th International Conference on Communications, Networking and Information Technology,2011

4. Developing social metrics for security – Modeling the security culture of IT workers individuals (case study).;B.AlSabbagh;Proceedings of the 5th International Conference on Communications, Computers and Applications (MIC-CCA 2012),2012

5. Alsabbagh, B., & Kowalski, S. (2012b). ST(CS)2 – Featuring socio-technical cyber security warning systems. In Proceedings of Cyber Security, Cyber Warfare and Digital Forensic (CyberSec),2012 International Conference. Kuala Lumpur, Malaysia: IEEE.