Project information
Streamlining cybersecurity incident analyses
(SECURIAN)
- Project Identification
- FW06010009
- Project Period
- 1/2023 - 12/2025
- Investor / Pogramme / Project type
-
Technology Agency of the Czech Republic
- TREND
- Subprograms 1 Technology leaders
- MU Faculty or unit
-
Institute of Computer Science
- RNDr. Vít Rusňák, Ph.D.
- RNDr. Milan Čermák, Ph.D.
- Bc. Štěpán Dvorský
- Denys Marakhovskyi
- Cooperating Organization
-
FlowMon Networks, a.s.
- Responsible person Jan Střítežský
- Responsible person Martin Holkovič
Cybersecurity teams currently use the tools that excel in analytical capabilities but offer only limited support for their procedural documentation. It results in unnecessarily high cognitive demands on analysts, which makes the whole process time-consuming and error-prone. The project aims at providing a drill-down analysis support tool that combines visual querying methods, an analytical provenance concept, and a machine-readable data format to store provenance metadata. The proposed approach will enable the authoring of reusable analytical process reports and their automatic execution, which will lead to a significant streamlining of cybersecurity analysts' workflows. By using a recommendation system, it will also be possible to propose further analytical steps.
Sustainable Development Goals
Masaryk University is committed to the UN Sustainable Development Goals, which aim to improve the conditions and quality of life on our planet by 2030.