How It's Made: Uncovering Detection Engineering Processes for Network Intrusion Detection Rules
Three phases and a common pattern in rule engineering are identified, offering SOC managers insights to improve their processes and expectations of engineer expertise, and challenges in generalizing rules beyond available tests are observed.
Koen T. W. Teuwen, Emmanuele Zambon, Luca Allodi
· 0 citations