Assessing the Challenges Faced by Security Operations Centres (SOC)

Zidan, Kamal ORCID: 0000-0002-6523-2924, Alam, Abu, Allison, Jordan ORCID: 0000-0001-8513-4646 and Al-sherbaz, Ali (2024) Assessing the Challenges Faced by Security Operations Centres (SOC). In: Advances in Information and Communication. Lecture Notes in Networks and Systems, 920 (1). Springer Cham, pp. 256-271. ISBN 9783031539633

Text 13843 Zidan Kamal et al (2024) Assessing the Challenges faced by Security Operations Centres (SOC).pdf - Accepted Version Restricted to Repository staff only until 16 March 2025. (Publisher Embargo). Available under License All Rights Reserved. Download (430kB)

Abstract

Cyber security threats are increasing rapidly, and due to this organisations are utilising Security Operations Centres(SOC) to monitor their network and to observe activities by collecting data about malicious events and behaviours. The main purpose of SOC is to defend organisations assets by spotting potential malicious activities. There are number of challenges that SOC team face on daily based. Hence, the question of this study is ‘What are the main challenges faced by SOC analysts and how their impact on organisations?’. This paper presents the outcome of interviews that have been carried out with SOC specialists in UK to understand the main challenges they face. The interviewed individuals are from different types and sizes of organisations. Hence, they have indicated various challenges when working with SOC. Skills shortages, False positives, Lack of automation, poor communication between SOC analysts and board level implications are the most highlighted difficulties amongst participants whilst working with SOC.

Item Type:	Book Section
Article Type:	Article
Uncontrolled Keywords:	Cyber Security, Security Operations Centre, Analysts
Subjects:	H Social Sciences > HD Industries. Land use. Labor > HD28 Management. Industrial Management > HD58 Organizational behavior, change and effectiveness. Corporate culture H Social Sciences > HD Industries. Land use. Labor > HD28 Management. Industrial Management > HD61 Risk in industry. Risk management Q Science > QA Mathematics > QA76 Computer software T Technology > T Technology (General)
Divisions:	Schools and Research Institutes > School of Business, Computing and Social Sciences
Research Priority Areas:	Applied Business & Technology
Depositing User:	Kamila Niekoraniec
Date Deposited:	20 Mar 2024 15:35
Last Modified:	21 Mar 2024 16:00
URI:	https://eprints.glos.ac.uk/id/eprint/13843

University Staff: Request a correction | Repository Editors: Update this record