Tobias Fiebig

Investigating System Operators' Perspective on Security Misconfigurations

2018

Nowadays, security incidents have become a familiar "nuisance," and they regularly lead to the exposure of private and sensitive data. The root causes for such incidents are rarely complex attacks. Instead, they are enabled by …

DomainPrio: Prioritizing Domain Name Investigations to Improve SOC Efficiency

2022 · IEEE Access

Security Operations Centers (SOCs) are in need of automation for triaging alerts. Current approaches focus on analyzing and enriching individual alerts. We take a different approach and analyze the population of alerts. In an observational …