On Collaboration and Automation in the Context of Threat Detection and Response with Privacy-Preserving Features
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F63839172%3A_____%2F25%3A10133794" target="_blank" >RIV/63839172:_____/25:10133794 - isvavai.cz</a>
Alternative codes found
RIV/00216224:14610/25:00140657
Result on the web
<a href="https://doi.org/10.1145/3707651" target="_blank" >https://doi.org/10.1145/3707651</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1145/3707651" target="_blank" >10.1145/3707651</a>
Alternative languages
Result language
angličtina
Original language name
On Collaboration and Automation in the Context of Threat Detection and Response with Privacy-Preserving Features
Original language description
Organizations and their security operation centers often struggle to detect and respond effectively to an extensive quantity of ever-evolving cyberattacks. While collaboration, such as threat intelligence sharing between security teams, and response automation are often discussed in the cybersecurity community, issues like data sensitivity and confidence in detection may hinder their adoption. This work investigates the potentials and challenges of collaboration and automation to enhance incident response processes. We propose a reference architecture for data sharing in threat detection and response, aiming to boost collaborative and automated efforts across organizations while also considering privacy-preserving features. To address these challenges and potentials, we discuss how such a framework could enhance current response processes within and between organizations, validated with results in local attack detection, incident response, and data sharing.
Czech name
—
Czech description
—
Classification
Type
J<sub>imp</sub> - Article in a specialist periodical, which is included in the Web of Science database
CEP classification
—
OECD FORD branch
10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)
Result continuities
Project
<a href="/en/project/LM2023054" target="_blank" >LM2023054: e-Infrastructure CZ</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)
Others
Publication year
2025
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Name of the periodical
DIGITAL THREATS: RESEARCH AND PRACTICE
ISSN
2692-1626
e-ISSN
2576-5337
Volume of the periodical
6
Issue of the periodical within the volume
1
Country of publishing house
US - UNITED STATES
Number of pages
36
Pages from-to
5
UT code for WoS article
001470073800003
EID of the result in the Scopus database
2-s2.0-105002995143