Hiroki Hada

DomainPrio: Prioritizing Domain Name Investigations to Improve SOC Efficiency

2022 · IEEE Access

Security Operations Centers (SOCs) are in need of automation for triaging alerts. Current approaches focus on analyzing and enriching individual alerts. We take a different approach and analyze the population of alerts. In an observational …