Security Concerns Towards Security Operations Centers

摘要

A security operations center (SOC) is a centralized place for monitoring and frequently managing the safety and security of the company's status. The primary purpose of SOC is to enable better incident detection, investigation, and response capabilities by using data from endpoint devices, logs, security systems, and network flows. Moreover, an efficient SOC can help the organizations enhance the ability of situational awareness and increase the deployment of enterprise resources to mitigate the security issues. However, the cyber threats are the significant challenges for SOC. In this paper, the authors expressed some security threats towards SOC and several solutions to fight against them.