Simon Foley | NTNU
Title talk: Human experience in computer network defense
About the talk
The technical tools and skills associated with individuals working in Security Operations Centers, Computer Security Incident Response Teams, and other Computer Network Defense environments, are well understood in terms of being leveraged to improve operational functionality. How these individuals experience their role is not as well understood.
Operationally, technology tends to be the focus, while the issues concerning people and processes tend to be sidelined. This talk introduces results from a qualitative research study on the human experience of people working in these environments. The purpose of this study was to develop an understanding of the experience of people working in these environments, with the aim of applying this knowledge to improve that experience and thereby improving functioning.
Results suggest that positive and negative aspects of the work are either amenable or not amenable to change. Areas of tension are identified, and posited as the focus for improving experience. For this purpose, theories of Social Identity Theory, Relational Dialectics, and Cognitive Dissonance, provide a way of understanding and interpreting these components of Computer Network Defense work, and can be used to assess the experience of staff.
Simon Foley is a professor in the Department of Information Security and Communication Technology at the Norwegian University of Science and Technology. He is also a member of NTNU's Center for Cyber and Information Security, with support from the Norwegian National Security Authority. NTNU CCIS is a national centre for research, education and competence development within the area of cyber and information security. Prior to joining NTNU in 2019, Simon was research director in the Institut Mines Télécom Chair on the cybersecurity of critical infrastructures at IMT Atlantique, France, and on the Computer Science faculty at University College Cork, Ireland where he led security research and education activities.