SOC are supposed to protect IT infrastructure from attacks and monitor the security situation. AI products make it easier to sort and filter information.

Enterprise security: AI tools for security operations centers Where and how AI can relieve Automate workflows and monitor networks First steps towards an AI certification Conclusion Table: Market overview of the providers Article in iX 1 / 2021 read Many organizations put IT professionals in Security Operations Center (SOC) together who continuously monitor and analyze the IT security situation. Their job is to identify, investigate and respond to incidents using a combination of tools and processes. Among other things, they monitor networks, servers, end devices and databases for activities that could indicate compromised security.

SOCs are therefore considered to be the epitome of intelligent, orchestrated and effective cybersecurity. Without further automation, however, their use remains limited, because the flood of incoming messages about deviations from the norm can hardly be managed manually. Especially since here, as in many other areas, there is a lack of skilled workers, the existing ones are overloaded and not everything is running smoothly. For example, in a research by the Ponemon Institute (PDF), more than half of the respondents rated their SOC’s ability to gather clues, investigate, and locate the source of threats as inefficient.

In addition, the SOC teams have difficulty identifying threats because they have to follow too many indications of a compromise of the network and to compare too much internal traffic with indications of an attack. In addition, there is a lack of internal resources and know-how as well as too many false positives.

Access to all contents of heise + exclusive tests, advice & background: independent, critically sound c’t, iX, Technology Review, Mac & i, Make, c’t read photography directly in the browser register once – read on all devices – can be canceled monthly first month free, then monthly 9, 95 € Weekly newsletter with personal reading recommendations from the editor-in-chief Start FREE month Start your FREE month now already subscribed to heise +?

Sign in and read Register now and read the article immediately More information about heise + Enterprise security: AI tools for security operations centers Where and how AI can relieve Automate workflows and monitor networks First steps towards an AI certification Conclusion Table: Market overview of the providers Article in iX 1 / 2021 read