arrow
返回

Capturing Tacit Knowledge in Security Operation Centers

delete2020-01-01
delete19
delete
OA
AI
S
Selina Cho *
J
Jassim Happa
S
Sadie Creese
DOI:10.1109/ACCESS.2020.2976076delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
The use of tacit knowledge has previously been shown to help expedite problem-solving procedures in the setting of medical emergency responses, as individuals can use past experiences in present and future challenges. However, there is a lack of understanding in its application in IT and socio-technical management. This paper examines the thought processes observed in Security Operational Centre (SOC) analysts facing threat events to lay the groundwork for tacit knowledge management in SOCs. Based on Sternberg's fieldwork in tacit knowledge, we conducted semi-structured interviews with ten analysts to explore the key artefacts and individual traits that aid their approach to communication, and to examine the thought processes under hypothetical incident handling scenarios. The results highlight a unanimous pursuit of Root Cause Analysis (RCA) upon the outbreak of an incident and stages of decision-making when escalating to third party support providers. Using Business Process Modelling and Notation (BPMN), we show the procedural elements of tacit knowledge from several scenarios. The results also suggest that simulation environments and physical proximity with analysts and vendors can facilitate the transfer of tacit knowledge more effectively in SOCs.
Keyword:
Security
Interviews
Task analysis
Knowledge management
Decision making
Licenses
Communication theory
DIKW
incident response
knowledge management
security operation center
sense-making
tacit knowledge
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Access 封面图
IEEE Access
IF:
3.6
论文数:
9.8W
被引数:
29.4W

机构

U
university of oxford
学者数:
9.8W
论文数: 8.6W
被引数: 137
U
university of london
学者数:
21.5W
论文数: 19.7W
被引数: 305
引用论文

引用论文

err分享
err收藏
Management of dispersed product development teams: the role of information technologies
err2002-12-17
err139
PREAI
errBoutellier, R; Gassmann, O; Macho, H; Roux, M
err分享
err收藏
Nitrogen removal in a SBR using the OGAR process control system
err2002-08-01
err0
PREAI
errZ. Tomlins; M. Thomas; J. Keller; J.-M. Audic; V. Urbain
err分享
err收藏
err分享
err收藏
学者 查看更多内容