@inproceedings{018247bf825d437d88202fc8a16c9783,
title = "I know my network: Collaboration and expertise in intrusion detection",
abstract = "The work of intrusion detection (ID) in accomplishing network security is complex, requiring highly sought-after expertise. While limited automation exists, the role of human ID analysts remains crucial. This paper presents the results of an exploratory field study examining the role of expertise and collaboration in ID work. Through an analysis of the common and situated expertise required in ID work, our results counter basic assumptions about its individualistic character, revealing significant distributed collaboration. Current ID support tools provide no support for this collaborative problem solving. The results of this research highlight ID as an engaging CSCW work domain, one rich with organizational insights, design challenges, and practical import.",
keywords = "Expertise, Field study, Information security, Intrusion detection",
author = "Goodall, \{John R.\} and Lutters, \{Wayne G.\} and Anita Komlodi",
year = "2004",
month = nov,
day = "6",
doi = "10.1145/1031607.1031663",
language = "English",
series = "Proceedings of the ACM Conference on Computer Supported Cooperative Work, CSCW",
publisher = "Association for Computing Machinery (ACM)",
pages = "342--345",
booktitle = "Computer Supported Cooperative Work - Conference Proceedings, CSCW 2004",
note = "2004 ACM Conference on Computer Supported Cooperative Work, CSCW 2004 ; Conference date: 06-11-2004 Through 10-11-2004",
}