Enhancing Risk-Based Decisions by Leveraging Cyber Security Automation

Due to the large scale, complex and dynamic state of cyber environments, the exponential growth of vulnerabilities and the advanced persistent threat to information systems, automation is indispensable to support cyber security. Although automation is already an integral part of many cyber security operations, there still are challenges to overcome to fully achieve Information Security Continuous Monitoring (ISCM) capabilities: real-time threat detection, incident response and risk-based decision making capabilities. Our ongoing research seeks to further refine our ISCM framework with specific emphasis to enhance risk-based decision making by leveraging security automation.