Situational awareness through reasoning on network incidents


Corporations worldwide work with teams of often dedicated system administrators to maintain, detect and prevent network infringements. This is a highly user-driven process that consumes hundreds (if not thousands) of man hours yearly. User reporting, the basis of most of these incident detection systems suffers from various biases and leads to below-par… (More)
DOI: 10.1145/2557547.2557562


10 Figures and Tables