How do information security workers use host data? A summary of interviews with security analysts

Robert A. Bridges, Michael D. Iannacone, John R. Goodall +1

Modern security operations centers (SOCs) employ a variety of tools for intrusion detection, prevention, and widespread log aggregation and analysis. While research efforts are qui…