Cross-Vendor Knowledge Transfer for Managed Security Services with Triplet Network

Toshiki Shibahara
Toshiki Shibahara
Hirokazu Kodera
Hirokazu Kodera
Daiki Chiba
Daiki Chiba
Kunio Hato
Kunio Hato
Ola Söderström
Ola Söderström
Daniel Dalek
Daniel Dalek

Proceedings of the 12th ACM Workshop on Artificial Intelligence and Security, pp. 59-69, 2019.

Cited by: 0|Bibtex|Views4|DOI:https://doi.org/10.1145/3338501.3357367
EI
Other Links: dl.acm.org|dblp.uni-trier.de|academic.microsoft.com

Abstract:

Managed security services detect incidents, i.e., successful attacks such as malware infection, in real time from a large number of alerts based on vendors' and security operations center's (SOC's) detection rules. To immediately find incidents, professional analysts in a SOC prioritize alerts if their indicators, i.e., meta-information o...More

Code:

Data:

Your rating :
0

 

Tags
Comments