In the last few years, cyber security has become more of a priority for all types of organisations than ever before. The cyber threat landscape has greatly evolved with attackers commonly using more advanced techniques to bypass perimeter security controls organisations have implemented through the setup of Security Operation Centres (SOCs) and Computer Security Incident Response Teams (CSIRTs).

Most SOCs and CSIRTs have a good set of capabilities. But present day SOC and CSIRT capabilities simply do not suffice to deal with the persistence and sophistication of professional threat actors, also considering the increasing complexity of ICT infrastructures and shortage of skilled staff. Therefore we need to increase the speed and effectiveness of detection of and response to ongoing attacks, and the scope, effectiveness and efficiency of proactive analysis of threats to the ICT infrastructure to enhance its cyber resilience.

The GEIGER team was present at GITEX Global, the biggest tech expo in the world, in Dubai, United Arab Emirates on 10-14 October 2022.

Wojciech Wideł, Preetam Mukherjee, and Mathias Ekstedt from our partner KTH published in IEEE Access about their work in the SOCCRATES project.

Mathias Ekstedt: ‘This paper covers the underlying algorithm that was developed for automatically suggesting courses of actions to the SOC operator. It analyzes the structure of attack graphs generated from models of the monitored ICT infrastructure and fits defense actions into a specified available budget.’