Open access repository

Home Open access repository

In 2014, we launched our open-access repository which offers full text access to conference proceedings from many of our events including the INC and HAISA series. These papers are free to access and distribute (subject to citing the source).

» Openaccess proceedings » Third International Conference on Human Aspects of Information Security & Assurance (HAISA 2009)

Third International Conference on Human Aspects of Information Security & Assurance (HAISA 2009)

Third International Conference on Human Aspects of Information Security & Assurance (HAISA 2009)
Athens, Greece, June 25-26, 2009
ISBN: 978-1-84102-231-4

Title: Towards Understanding Diagnostic Work During the Detection and Investigation of Security Incidents
Author(s): Rodrigo Werlinger, Kasia Muldner, Kirstie Hawkey, Konstantin Beznosov
Reference: pp119-134
Keywords: Diagnosis, Security Incident Response, Qualitative Analysis, Collaboration, Security Tools
Abstract: This study investigates how security practitioners perform diagnostic work during the identification of security incidents. Based on empirical data from 16 interviews with security practitioners, we identify the tasks, skills, strategies, and tools that security practitioners use to diagnose security incidents. Our analysis shows that the diagnosis of security incidents is a highly collaborative activity, which may involve practitioners developing their own tools to perform specific tasks. Furthermore, our results suggest that diagnosis during security incident response is complicated by practitioners’ need to rely on tacit knowledge, as well as usability issues with security tools. We offer recommendations to improve technology that supports the diagnosis of security incidents.
Download count: 1845

How to get this paper:

Download a free PDF copy of this paperBuy this book at Lulu.com

PDF copy of this paper is free to download. You may distribute this copy providing you cite this page as the source.