SoK: Applications and Challenges of using Recommender Systems in Cybersecurity Incident Handling and Response

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14610%2F22%3A00126038" target="_blank" >RIV/00216224:14610/22:00126038 - isvavai.cz</a>
Result on the web
<a href="https://dl.acm.org/doi/10.1145/3538969.3538981" target="_blank" >https://dl.acm.org/doi/10.1145/3538969.3538981</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1145/3538969.3538981" target="_blank" >10.1145/3538969.3538981</a>

Result language
angličtina
Original language name
SoK: Applications and Challenges of using Recommender Systems in Cybersecurity Incident Handling and Response
Original language description
Incident handling, a fundamental activity of a cybersecurity incident response team, is a complex discipline that consumes a significant amount of personnel's time and costs. There are continuous efforts to facilitate incident handling and response in terms of providing procedural or decision support and processing relevant data. In this paper, we survey the approaches towards (semi-)automated incident handling and response backed by recommender systems that are successful in other domains. We discuss which phases and tiers of incident handling can be automated and to what level while evaluating the maturity of proposed approaches and tools. While we did not find a full-scale recommender system that would guide the user through incident handling and suggest which steps to take, many of them aim at particular problems. The discussed issues are not resolved yet but seem to get the attention of researchers and will likely be investigated in the future.
Czech name
—
Czech description
—

Project
<a href="/en/project/EF16_019%2F0000822" target="_blank" >EF16_019/0000822: CyberSecurity, CyberCrime and Critical Information Infrastructures Center of Excellence</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year
2022
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection
The 17th International Conference on Availability, Reliability and Security (ARES 2022)
ISBN
9781450396707
ISSN
—
e-ISSN
—
Number of pages
10
Pages from-to
„25:1“-„25:10“
Publisher name
ACM
Place of publication
Vienna
Event location
Vienna, Austria
Event date
Aug 23, 2022
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
001122620500025

Similar results(10)