Other formats:
BibTeX
LaTeX
RIS
@inproceedings{1847738,
author = {Macák, Martin and Ošlejšek, Radek and Bühnová, Barbora},
address = {Neuveden},
booktitle = {2022 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)},
doi = {http://dx.doi.org/10.1109/EuroSPW55150.2022.00047},
keywords = {cybersecurity; hands-on training; process mining; data analysis; learning analytics},
howpublished = {elektronická verze "online"},
language = {eng},
location = {Neuveden},
isbn = {978-1-6654-9560-8},
pages = {394-402},
publisher = {IEEE},
title = {Applying Process Discovery to Cybersecurity Training: An Experience Report},
url = {https://ieeexplore.ieee.org/document/9799415},
year = {2022}
}
TY - JOUR
ID - 1847738
AU - Macák, Martin - Ošlejšek, Radek - Bühnová, Barbora
PY - 2022
TI - Applying Process Discovery to Cybersecurity Training: An Experience Report
PB - IEEE
CY - Neuveden
SN - 9781665495608
KW - cybersecurity
KW - hands-on training
KW - process mining
KW - data analysis
KW - learning analytics
UR - https://ieeexplore.ieee.org/document/9799415
N2 - Quality improvement of practical cybersecurity training is challenging due to the process-oriented nature of this learning domain. Event logs provide only a sparse preview of trainees' behavior in a form that is difficult to analyze. Process mining has great potential in converting events into behavioral graphs that could provide better cognitive features for understanding users' behavior than the raw data. However, practical usability for learning analytics is affected by many aspects. This paper aims to provide an experience report summarizing key features and obstacles in integrating process discovery into cyber ranges. We describe our lessons learned from applying process mining techniques to data captured in a cyber range, which we have been developing and operating for almost ten years. We discuss lessons learned from the whole workflow that covers data preprocessing, data mapping, and the utilization of process models for the post-training analysis of Capture the Flag games. Tactics addressing scalability are explicitly discussed because scalability has proven to be a challenging task. Interactive data mapping and Capture the Flag specific features are used to address this issue.
ER -
MACÁK, Martin, Radek OŠLEJŠEK and Barbora BÜHNOVÁ. Applying Process Discovery to Cybersecurity Training: An Experience Report. Online. In \textit{2022 IEEE European Symposium on Security and Privacy Workshops (EuroS\&{}PW)}. Neuveden: IEEE, 2022, p.~394-402. ISBN~978-1-6654-9560-8. Available from: https://dx.doi.org/10.1109/EuroSPW55150.2022.00047.
|
