The real work of computer network defense analysts the analysis roles and processes that transform network data into security situation awareness

Mathematics and Visualization

Volumn , Issue , 2008, Pages 19-37

  D'Amico, A ^a   Whitley, K ^b  

^a Secure Decisions Division of Applied Visions Inc   (United States)

^b Department of Defense ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DATA FUSION; DIAMONDS; JOB ANALYSIS; SECURITY SYSTEMS; VISUALIZATION;

ANALYTIC CONCLUSION; ANALYTICAL PROCESS; COGNITIVE DEMANDS; COGNITIVE TASK ANALYSIS; MULTIPLE DATA SOURCES; SECURITY SITUATION; STATE OF THE PRACTICE; U.S. DEPARTMENT OF DEFENSE;

SECURITY OF DATA;

EID: 84898916485     PISSN: 16123786     EISSN: 2197666X     Source Type: Book Series    
DOI: 10.1007/978-3-540-78243-8_2     Document Type: Conference Paper

References (11)

1. Alberts C, Dorofee A, Killcrece G et al. (2004) Defining Incident Management Processes for CSIRTS: A Work in Progress, Technical Report CMU/SEI-2004-TR-015, ESC-TR-2004-015 Technical Report CMU/SEI-2004-TR-015, ESC-TR http ://www.sei.cmu.edu/publications/documents/04.reports/04tr015.html. Accessed 06 December 2007
2. Biros D, Eppich T (2001) Human Element Key to Intrusion Detection. Signal, August: 31
3. D'Amico A, Whitley K, Tesone D et al. (2005) Achieving cyber defense situational awareness: A cognitive task analysis of information assurance analysts. Proceedings of the Human Factors and Engineering Society Annual Meeting: 229-233
4. Endsley M (1995) Toward a theory of situation awareness in dynamic systems. Human Factors, 37(1): 32-64
5. Endsley M, Bolte B, Jones D (2003) Designing for Situation Awareness: An Approach to User-Centered Design. Taylor & Francis, New York: 13-18
6. The Real Work of Computer Network Defense Analysts 37
7. Killcrece G, Kossakowski KP, Ruefle R, Zajicek M (2003) State of the Practice of Computer Security Incident Response Teams (CSIRTS), Technical Report CMU/SEI-2003-TR-001, ESC-TR-2003-001
8. Llinas J, Hall D (1998) An introduction to multi-sensor data fusion. IEEE Report 0-7803-4455-3/98
9. McAfee Virtual Criminology Report-Cybercrime : The Next Wave(2007) http ://www.mcafee. com. Accessed 04 December 2007
10. Saydjari O (2004) Cyber Defense: Art to Science, Communications of the ACM 47(3): 53-57
11. Waltz E (1998) Information understanding: integrating data fusion and data mining processes. IEEE Report 0-7803-4455-3/98