Building an effective security operations capability such as a security operations center (SOC) has always been a challenging endeavor. Balancing the need to successfully integrate the people, processes, and technologies required to support your mission requires a deep understanding of your network and your threat landscape. New AI tools and technologies present both challenges and opportunities. These tools can complicate your operational environment but might be used by malicious actors to enhance their attacks. But AI can also be leveraged to build out and enable your SOC by covering gaps in tools, your workforce, and automation.
Dr. Justin Novak is a Senior Security Operations Researcher in the CERT Division of the Software Engineering Institute (SEI), who leads a team as part of the Security Operations Division that supports the U.S. Department of State, Department of War, and United States Treasury. His focus is on capacity building for incident responders at both the individual and organizational level. He also researches the development and operation of CSIRTs, Sector CSIRTs, and SOCs, focusing on incident response and incident management.
Christopher Ian Rodman is a Senior Cybersecurity Operations Researcher within the CERT Division of the SEI, supporting U.S. government agencies in strengthening operational capacity of international CSIRTs for allies and partner nations. He focuses on incident response readiness, security operations maturity, and analytical tradecraft in complex threat environments. He also teaches Host-Based Digital Forensics at Carnegie Mellon University and has previously taught at University of Pittsburgh and CMU’s Heinz College of Public Policy.
Please share with interested colleagues.
Copyright © - SKIZCorp | Tools for Building an AI-Enabled SOC | NR