Optimizing Security Orchestration, Automation, and Response for Incident response

This research project aims to develop cost-effective solutions to aid organizations in defending against cyber-attacks. With limited resources, security operations centers are struggling to defend against the vast volume of cyber-attacks. The project proposes reducing the work effort and amount of labor needed to perform tasks such as manual inspection and incident responses. By enhancing the functionality of current plugins and developing new ones for the Security Orchestration, Automation, and Response tool, cybersecurity experts will spend less time monitoring and more time implementing better security metrics, resulting in a more secure system and organization. The project’s expected benefit to partner organizations is a reduction in the cost of services and improved cybersecurity measures, resulting in fewer cyber-attacks and better protection for both the organization and its clients.

Faculty Supervisor:

Rozita Dara

Student:

Partner:

ISA Cybersecurity

Discipline:

Computer science

Sector:

Professional, scientific and technical services

University:

University of Guelph

Program: