Developing and Analysis of Cyber Security Models for Security Operation Center in Myanmar

Aung, Wai Phyo; Lwin, Htar Htar; Lin, Kyaw Kyaw

doi:10.1109/icca49400.2020.9022821

Cited by 3 publications

(3 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These researchers consider all analyst functions to be the generic functions one would anticipate from an analyst. Similarly, Aung et al (2020) and Li et al (2016) discuss how analysts apply patches to fix vulnerabilities without assigning them to a particular tier. Also, analysts working for an in-house SOC (a SOC that is owned by the organisation it is protecting) may have different functions in comparison with analysts working for a SOC that offers its services as a Managed Security Service Provider (MSSP).…”

Section: Discussion and Research Implicationsmentioning

confidence: 99%

See 1 more Smart Citation

A systematic method for measuring the performance of a cyber security operations centre analyst

Agyepong

Cherdantseva

Reinecke

et al. 2023

Computers & Security

View full text Add to dashboard Cite

Section: Discussion and Research Implicationsmentioning

confidence: 99%

“…Analysts play a vital role in the operations of a SOC and the delivery of a SOC's services ( Aung et al, 2020;Axon et al, 2017 ). From a theoretical perspective, the activities and operations of analysts can be understood using the Activity Theory (AT) ( Sundaramurthy et al, 2016 ).…”

Section: Key Functions Of a Soc Analystmentioning

confidence: 99%

A systematic method for measuring the performance of a cyber security operations centre analyst

Agyepong

Cherdantseva

Reinecke

et al. 2023

Computers & Security

View full text Add to dashboard Cite

“…The 2016 Global Information Security Survey notes that SOC is available in 56% of the organizations surveyed [15]. The importance of unified, consolidated cybersecurity incident prevention, detection, and response [16] [17] will grow as more companies understand [18].…”

Section: Methodsmentioning

confidence: 99%

Hermes Ransomware v2.1 Action Monitoring using Next Generation Security Operation Center (NGSOC) Complex Correlation Rules

Dun¹,

Razak²,

Zolkipli³

et al. 2022

International Journal on Advanced Science, Engineering and Information Technology

View full text Add to dashboard Cite

A new malware is identified every fewer than five seconds in today's threat environment, which is changing at a rapid speed. As part of cybercrime, there is a lot of malware activity that can infect the system and make it problematic. Cybercrime is a rapidly growing field, allowing cyber thieves to engage in a wide range of damaging activities. Hacking, scams, child pornography, and identity theft are all examples of cybercrime. Cybercrime victims might be single entities or groups of persons who are being targeted for harm. Cybercrime and malware become more hazardous and damaging because of these factors. Subsequent to these factors, there is a need to construct Next Generation Security Operation Centers (NGSOCs). SOC consists of human resources, processes, and technology designed to deal with security events derived from the Security Incident Event Management (SIEM) log analysis. This research examines how Next Generation Security Operation Centers (NGSOCs) respond to malicious activity. This study develops a use case to detect the latest Hermes Ransomware v2.1 malware using complex correlation rules for the SIEM anomalies engine. This study aims to analyze and detect Hermes Ransomware v2.1. As a result, NGSOC distinguishes malware activities' initial stages by halting traffic attempts to download malware. By forwarding logs to SIEM, the use case can support Threat Analyst in finding other Indicators of Compromise (IOC) to assist organizations in developing a systematic and more preemptive approach for ransomware detection.

show abstract

Features of Creating a Virtual Laboratory for Developing and Applying Correlation Rules in Modern SIEM-Systems when Training Security Operation Center Analysts (by the Example of Microsoft Windows)

Zakharov,

Shabalin,

Kruchkovsky

2024

2024 International Russian Smart Industry Conference (SmartIndustryCon)

View full text Add to dashboard Cite

Developing and Analysis of Cyber Security Models for Security Operation Center in Myanmar

Cited by 3 publications

References 3 publications

A systematic method for measuring the performance of a cyber security operations centre analyst

A systematic method for measuring the performance of a cyber security operations centre analyst

Hermes Ransomware v2.1 Action Monitoring using Next Generation Security Operation Center (NGSOC) Complex Correlation Rules

Features of Creating a Virtual Laboratory for Developing and Applying Correlation Rules in Modern SIEM-Systems when Training Security Operation Center Analysts (by the Example of Microsoft Windows)

Contact Info

Product

Resources

About