3 papers
cs.CR2026
NLLog: Lightweight, Explainable SOC Anomaly Detection via Log-to-Language Rewriting
Samuel Ndichu, Tao Ban, Seiichi Ozawa +2
System-generated logs underpin security monitoring, yet their rigid template-based format hinders both automated analysis and human comprehension. We present NLLog (Natural-Languag…
cs.CR2026
STRAL: What Adaptation Gains, Loses, and Costs in SOC Alert Screening
Samuel Ndichu, Tao Ban, Seiichi Ozawa +2
Security-alert screening must balance false-alert burden against missed important events, yet adaptation can change which events are detected. We investigate this trade-off using S…
cs.CR2026
AI-Driven Security Alert Screening and Alert Fatigue Mitigation in Security Operations Centers: A Survey
Samuel Ndichu, Tao Ban, Seiichi Ozawa +2
Security alert screening is the downstream task of filtering, prioritizing, correlating, and contextualizing alerts for analyst attention in Security Operations Centers. This surve…