@article{Rooney2018b,

title = {What You Can Change and What You Can't: Human Experience in Computer Network Defenses},

author = {Vivien M Rooney and Simon N Foley},

doi = {10.1007/978-3-030-03638-6_14},

issn = {16113349},

year  = {2018},

date = {2018-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {11252 LNCS},

pages = {219--235},

abstract = {The work of Computer Network Defense conducted, for instance, in Security Operations Centers and by Computer Security Incident Teams, is dependent not alone on technology, but also on people. Understanding how people experience these environments is an essential component toward achieving optimal functioning. This paper describes a qualitative research study on the human experience of working in these environments. Using Grounded Theory, a psychological understanding of the experience is developed. Results suggest that positive and negative aspects of the work are either amenable or not amenable to change. Areas of tension are identified, and posited as the focus for improving experience. For this purpose, psychological theories of Social Identity Theory, Relational Dialectics, and Cognitive Dissonance, provide a way of understanding and interpreting these components of Computer Network Defence work, and can be used to assess the experience of staff.},

keywords = {CSIRT Human experience, psychology, Security, SOC},

pubstate = {published},

tppubtype = {article}

}