Mitigating Machine Learning Risks within a Vulnerable SIEM to Prevent Biased SOC Decisions Working Paper

Working Paper: Mitigating Machine Learning Risks within a Vulnerable SIEM to Prevent Biased SOC Decisions

In this working paper, authors Landmesser and Vommi explore weaknesses in machine learning systems used by a SIEM that present a technical issue, which can also negatively influence decisions made by SOC personnel. Incorrect ML classifications from APT attacks result in incorrect security decisions based on SIEM output, causing an even more damaging impact on required incident response.

Publisher: National CyberWatch Center
Date Published: October 18, 2023
Classification: Protection and Defense (PD)
Education Level: Higher Education, Informal Education, Vocational/Professional Development Education
Type: Working Paper
Language: English