Alert Alchemy: SOC Workflows and Decisions in the Management of NIDS Rules

Signature-based network intrusion detection systems (NIDSs) and network intrusion prevention systems (NIPSs) remain at the heart of network defense, along with the rules that enable them to detect threats. These rules allow Security Operation Centers (SOCs) to properly defend a network, yet we know almost nothing about how rules are created,...

DomainPrio: Prioritizing Domain Name Investigations to Improve SOC Efficiency

Security Operations Centers (SOCs) are in need of automation for triaging alerts. Current approaches focus on analyzing and enriching individual alerts. We take a different approach and analyze the population of alerts. In an observational study over 24 weeks, we find a surprising pattern: some domains get analyzed again and again by different...

Mitigating the Impacts of the Electric Vehicle Charging Infrastructure on Residential Grids: Next Generation Grid Operations Knowledge Framework

With the advancements in technology and the enforcement of governmental regulations and incentives, the share of electric vehicles (EVs) in the mobility sector is on the rise. Although this aids the transition into a greener future with net-zero carbon emissions, the increase in EV penetration rates can have immense impacts on the grid and its...

Controller to enable the enhanced frequency response services from a multi-electrical energy storage system

The increased adoption of renewable energy generation is reducing the inertial response of the Great Britain (GB) power system, which translates into larger frequency variations in both transient and pseudo-steady-state operation. To help mitigate this, National Grid, the transmission system operator in GB, has designed a control scheme...