Alert Characterization by Non-Expert Users in a Cybersecurity Virtual Environment: a Usability Study - Archive ouverte HAL
Conference Papers Year : 2020

Alert Characterization by Non-Expert Users in a Cybersecurity Virtual Environment: a Usability Study

Abstract

Although cybersecurity is a domain where data analysis and training are considered of the highest importance, few virtual environments for cybersecurity are specifically developed, while they are used efficiently in other domains to tackle these issues. By taking into account cyber analysts' practices and tasks, we have proposed the 3D Cyber Common Operational Picture model (3D Cyber-COP), that aims at mediating analysts' activities into a Collaborative Virtual Environment (CVE), in which users can perform alert analysis scenarios. In this article, we present a usability study we have performed with non-expert users. We have proposed three virtual environments (a graph-based, an office-based, and the coupling of the two previous ones) in which users should perform a simplified alert analysis scenario based on the WannaCry ransomware. In these environments, users must switch between three views (alert, cyber and physical ones) which all contain different kinds of data sources. These data have to be used to perform the investigations and to determine if alerts are due to malicious activities or if they are caused by false positives. We have had 30 users, with no prior knowledge in cybersecurity. They have performed very well at the cybersecurity task and they have managed to interact and navigate easily. SUS usability scores were above 70 for the three environments and users have shown a preference towards the coupled environment, which was considered more practical and useful.
Fichier principal
Vignette du fichier
Kabil_SalentoAVR_CameraReady.pdf (3.01 Mo) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-02891940 , version 1 (07-07-2020)

Identifiers

Cite

Alexandre Kabil, Thierry Duval, Nora Cuppens. Alert Characterization by Non-Expert Users in a Cybersecurity Virtual Environment: a Usability Study. AVR 2020: 7th International Conference on Augmented Reality, Virtual Reality and Computer Graphics, Sep 2020, Lecce, Italy. ⟨10.1007/978-3-030-58465-8_6⟩. ⟨hal-02891940⟩
106 View
200 Download

Altmetric

Share

More