Methods of visualizing temporal patterns in and mission impact of computer security breaches

D’Amico, Anita; Larkin, Mark

doi:10.1109/discex.2001.932229

Cited by 17 publications

(1 citation statement)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Indeed, much of the research on SA in cybersecurity, or cyber-SA, has primarily taken an algorithmic perspective (Orlikowski & Iacono, 2001); focusing primarily on the automation and the development of new defensive tools for protection, detection and response . Examples of this work include data visualizations (D'Amico, A. & Larkin, 2001), data fusion methods for tracking cyber-attacks (Stotz & Sudit, 2007;Yang, Shanchieh J., Stotz, Holsopple, Sudit, & Kuhl, 2009), identification of internal and external threats using * Corresponding author e-mail: mjt241@smeal.psu.edu intelligent agents (Buford, Lewis, & Jakobson, 2008;Yen et al, 2010), and the use of probabilistic models to assess network vulnerability (Peng, Li, Xinming, Peng, & Levy, 2010;Tadda, G., Salerno, Boulware, Hinman, & Gorton, 2006).…”

Section: Introductionmentioning

confidence: 99%

A human-in-the-loop approach to understanding situation awareness in cyber defence analysis

Tyworth¹,

Giacobe²,

Mancuso³

et al. 2013

ICST Transactions on Security and Safety

View full text Add to dashboard Cite

In this paper we argue for a human-in-the-loop approach to the study of situation awareness in computer defence analysis (CDA). The cognitive phenomenon of situation awareness (SA) has received significant attention in cybersecurity/CDA research. Yet little of this work has attended to the cognitive aspects of situation awareness in the CDA context; instead, the human operator has been treated as an abstraction within the larger human-technology system. A more human-centric approach that seeks to understand the socio-cognitive work of human operators as they perform CDA will yield greater insights into the design of tools and interfaces for CDA. As support for this argument, we present our own work employing the Living Lab Framework through which we ground our experimental findings in contextual knowledge of real-world practice.

show abstract