Security Orchestration, Automation, and Response for Incident Detection and Triage Analysis

When responding to any cybersecurity threat, it is important that a security analyst is able to respond to it as quickly as possible so that they can reduce or eliminate any damage that the threat may cause. However, the high amount of data that must be analyzed when investigating a security event can impact the speed of an investigation. By automating routine incident response processes and orchestrating fundamental investigative approaches, much of the burden of the investigation can be lifted from the analyst. By improving the efficiency of cybersecurity investigations, businesses and citizens alike will be better protected from the threat of cyber criminals.

Faculty Supervisor:

Charlie Obimbo

Student:

Partner:

ISA Cybersecurity Inc.

Discipline:

Computer science

Sector:

Information and Communications Technology; Other

University:

University of Guelph

Program: