awesome-AISecOps

AISecOps is an interdiscipline of SecOps (Security Operations), AISec (AI for Security) and AIOps (AI for IT Operations) technologies. This repository contains a curated list of awesome resources related to AISecOps, enjoy it!

• Table of Contents
  • SecOps
    • Papers on SecOps
    • Reports and Presentations on SecOps
      • Surveys
      • Metrics
    • Frameworks for SecOps
    • Blogs on SecOps
  • AISec
    • Papers on AISec
      • Reviews
      • Network Traffic Analysis
      • Anomaly Detection
      • Community Detection
    • Tools for AISec
    • Awesome projects on AISec
  • AIOps
    • Papers on AIOps
    • Researchers and Teams on AIOps
    • Awesome projects on AIOps

---

SecOps

• Papers on SecOps

  • Matched and Mismatched SOCs: A Qualitative Study on Security Operations Center Issues, CCS 2019
  • 99% false positives: A qualitative study of SOC analysts' perspectives on security alarms, USENIX 2022
  • Security Operations Center: A Systematic Study and Open Challenges, IEEE ACCESS 2020

• Reports and Presentations on SecOps

  • Surveys

    • SANS 2021 Automation and Integration Survey
    • Hype Cycle for Security Operations 2021

  • Metrics

    • Your Metrics Suck!5 SecOps Metrics That Are Better Than MTTR, RSA 2021

• Frameworks for SecOps

  • ATT&CK: tactic and technique modeling on adversarial behaviors.
  • ENGAGE: a framework for discussing and planning adversary engagement, deception, and denial activities.
  • IACD: a framework facilitate the integration, automation, orchestration and sharing of machine-readable cyber threat information.
  • CARTA: the Continuous Adaptive Risk and Trust Assessment framework for enterprise level risk and trust management.

• Blogs on SecOps

  • ATT&CK News

AISec

• Papers on AISec

  • Reviews

    • Dos and Don'ts of Machine Learning in Computer Security, USENIX 2022

  • Network Traffic Analysis

    • HAST-IDS: Learning Hierarchical Spatial-Temporal Features Using Deep Neural Networks to Improve Intrusion Detection, IEEE ACCESS
    • Locate-Then-Detect: Real-time Web Attack Detection via Attention-based Deep Neural Networks, IJCAI 2019

  • Anomaly Detection

    • DeepLog: Anomaly Detection and Diagnosis from System Logs Through Deep Learning, CCS 2017
    • Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection, NDSS 2018

  • Community Detection

    • HERCULE: Attack Story Reconstruction via Community Discovery on Correlated Log Graph, ACSAC 2016

• Tools for AISec

  • DeepTraffic: deep learning demo for network traffic analysis.

• Awesome projects on AISec

  • Awesome Machine Learning for Cyber Security
  • Machine Learning for Cyber Security

AIOps

• Papers on AIOps

  • Automatically and Adaptively Identifying Severe Alerts for Online Service Systems, INFOCOM 2020
  • Understanding and Handling Alert Storm for Online Service Systems, ICSE 2020
  • Real-Time Incident Prediction for Online Service Systems, ESEC 2020

• Researchers and Teams on AIOps

  • TSINGHUA NETMAN LAB

• Awesome projects on AIOps

  • Awesome AIOps