A taxonomy of cyber awareness questions for the user-centered design of cyber situation awareness

Abstract

This paper offers insights to how cyber security analysts establish and maintain situation awareness of a large computer network. Through a series of interviews, observations, and a card sorting activity, we examined the questions analysts asked themselves during a network event. We present the results of our work as a taxonomy of cyber awareness questions that represents a mental model of situation awareness in cyber security analysts. © 2013 Springer-Verlag Berlin Heidelberg.