{"id":"https://openalex.org/W7161985077","doi":"https://doi.org/10.1016/j.cose.2026.104971","title":"Adaptive Trust-Aware SOC Human\u2013AI Teaming for resilient operations","display_name":"Adaptive Trust-Aware SOC Human\u2013AI Teaming for resilient operations","publication_year":2026,"publication_date":"2026-05-21","ids":{"openalex":"https://openalex.org/W7161985077","doi":"https://doi.org/10.1016/j.cose.2026.104971"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2026.104971","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104971","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.cose.2026.104971","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078952092","display_name":"Mahender Kumar","orcid":"https://orcid.org/0000-0001-7082-0475"},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Mahender Kumar","raw_affiliation_strings":["Secure Cyber System Research Group, WMG, University of Warwick, Coventry, CV47AL, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0001-7082-0475","affiliations":[{"raw_affiliation_string":"Secure Cyber System Research Group, WMG, University of Warwick, Coventry, CV47AL, United Kingdom","institution_ids":["https://openalex.org/I39555362"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136723942","display_name":"Ruby Rani","orcid":null},"institutions":[{"id":"https://openalex.org/I84884186","display_name":"Newcastle University","ror":"https://ror.org/01kj2bm70","country_code":"GB","type":"education","lineage":["https://openalex.org/I84884186"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ruby Rani","raw_affiliation_strings":["Newcastle University, Newcastle upon Tyne, NE1 7RU, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Newcastle University, Newcastle upon Tyne, NE1 7RU, United Kingdom","institution_ids":["https://openalex.org/I84884186"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043277300","display_name":"Gregory Epiphaniou","orcid":"https://orcid.org/0000-0003-1054-6368"},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Gregory Epiphaniou","raw_affiliation_strings":["Secure Cyber System Research Group, WMG, University of Warwick, Coventry, CV47AL, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0003-1054-6368","affiliations":[{"raw_affiliation_string":"Secure Cyber System Research Group, WMG, University of Warwick, Coventry, CV47AL, United Kingdom","institution_ids":["https://openalex.org/I39555362"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5123508567","display_name":"Carsten Maple","orcid":null},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Carsten Maple","raw_affiliation_strings":["Secure Cyber System Research Group, WMG, University of Warwick, Coventry, CV47AL, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Secure Cyber System Research Group, WMG, University of Warwick, Coventry, CV47AL, United Kingdom","institution_ids":["https://openalex.org/I39555362"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5078952092"],"corresponding_institution_ids":["https://openalex.org/I39555362"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.65839629,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"169","issue":null,"first_page":"104971","last_page":"104971"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.35690000653266907,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.35690000653266907,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12607","display_name":"Personal Information Management and User Behavior","score":0.09510000050067902,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10906","display_name":"AI-based Problem Solving and Planning","score":0.07129999995231628,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.3018999993801117},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.27549999952316284},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.25189998745918274},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.22540000081062317}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7585999965667725},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.36410000920295715},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3488999903202057},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3018999993801117},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.27549999952316284},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.2624000012874603},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.25189998745918274},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.22540000081062317},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.22130000591278076},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.22059999406337738}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.cose.2026.104971","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104971","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.cose.2026.104971","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104971","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.6161571145057678}],"awards":[],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W1988453576","https://openalex.org/W2040669357","https://openalex.org/W2110107911","https://openalex.org/W2264814036","https://openalex.org/W2533908554","https://openalex.org/W2625332781","https://openalex.org/W2744192399","https://openalex.org/W2744498396","https://openalex.org/W2787590563","https://openalex.org/W2809377409","https://openalex.org/W2914742139","https://openalex.org/W2944277663","https://openalex.org/W2949728573","https://openalex.org/W2955853369","https://openalex.org/W2990370400","https://openalex.org/W3007702218","https://openalex.org/W3013998503","https://openalex.org/W3106755919","https://openalex.org/W3111749540","https://openalex.org/W3115490974","https://openalex.org/W3137141854","https://openalex.org/W3168308442","https://openalex.org/W3172754339","https://openalex.org/W3179245071","https://openalex.org/W3180450071","https://openalex.org/W3198775197","https://openalex.org/W3207777896","https://openalex.org/W4206456103","https://openalex.org/W4211017739","https://openalex.org/W4213319945","https://openalex.org/W4213440380","https://openalex.org/W4224470036","https://openalex.org/W4224981387","https://openalex.org/W4225151977","https://openalex.org/W4286697961","https://openalex.org/W4297903006","https://openalex.org/W4312850122","https://openalex.org/W4367333207","https://openalex.org/W4378234660","https://openalex.org/W4381137026","https://openalex.org/W4385484319","https://openalex.org/W4386485363","https://openalex.org/W4387319440","https://openalex.org/W4387385658","https://openalex.org/W4388293793","https://openalex.org/W4388430439","https://openalex.org/W4389161294","https://openalex.org/W4391058222","https://openalex.org/W4391399751","https://openalex.org/W4392504765","https://openalex.org/W4400282738","https://openalex.org/W4401865583","https://openalex.org/W4406755163","https://openalex.org/W4409581061","https://openalex.org/W4412989594","https://openalex.org/W4414817808"],"related_works":[],"abstract_inverted_index":{"Security":[0],"Operations":[1],"Centres":[2],"(SOCs)":[3],"face":[4],"sustained":[5],"pressure":[6],"from":[7,79],"alert":[8],"fatigue,":[9],"fragmented":[10],"tooling,":[11],"analyst":[12],"cognitive":[13],"overload,":[14],"and":[15,25,33,44,72,84,105,113,115,150,163,182],"increasingly":[16],"complex":[17],"multi-stage":[18],"attack":[19],"campaigns.":[20],"Although":[21],"Artificial":[22],"Intelligence":[23],"(AI)":[24],"Machine":[26],"Learning":[27],"(ML)":[28],"can":[29],"support":[30,167],"detection,":[31],"triage,":[32],"response,":[34],"their":[35],"operational":[36],"value":[37],"is":[38,175],"constrained":[39],"when":[40],"trust,":[41],"transparency,":[42],"accountability,":[43],"human":[45],"oversight":[46],"are":[47],"not":[48],"systematically":[49],"addressed.":[50],"This":[51],"paper":[52,131],"presents":[53],"the":[54,110,130,157],"Adaptive":[55],"Trust-Aware":[56],"SOC":[57,70,89,194],"Human\u2013AI":[58],"Teaming":[59],"(ATA-SOC-HAT)":[60],"framework,":[61],"a":[62,80,133,139,177,183],"design-oriented":[63],"conceptual":[64,180],"framework":[65,76,111,158,181],"for":[66,145,186],"trust-calibrated":[67],"collaboration":[68,91],"between":[69],"analysts":[71],"AI":[73],"services.":[74],"The":[75,170],"was":[77],"derived":[78],"structured":[81],"literature":[82],"review":[83],"maps":[85],"recurrent":[86],"barriers":[87],"in":[88,193],"human\u2013AI":[90,191],"to":[92,166],"explicit":[93],"functional":[94],"modules,":[95],"including":[96],"explainable":[97],"interaction,":[98],"dynamic":[99],"task":[100],"allocation,":[101],"trust":[102],"calibration,":[103],"arbitration,":[104],"continuous":[106],"learning.":[107],"We":[108,153],"describe":[109],"architecture":[112],"workflow":[114],"illustrate":[116],"its":[117],"intended":[118],"operation":[119],"through":[120],"an":[121],"advanced":[122],"threat":[123],"scenario.":[124],"Rather":[125],"than":[126],"claiming":[127],"empirical":[128,188],"validation,":[129],"provides":[132],"prioritised":[134],"evaluation":[135,189],"roadmap":[136],"that":[137],"identifies":[138],"practical":[140],"core":[141],"set":[142],"of":[143,172,190],"metrics":[144],"future":[146,187],"practitioner-in-the-loop":[147],"studies,":[148],"simulations,":[149],"prototype":[151],"implementations.":[152],"also":[154],"summarise":[155],"how":[156],"aligns":[159],"with":[160],"relevant":[161],"cybersecurity":[162],"trustworthy-AI":[164],"guidance":[165],"accountable":[168],"deployment.":[169],"contribution":[171],"this":[173],"work":[174],"therefore":[176],"traceable,":[178],"literature-derived":[179],"realistic":[184],"basis":[185],"teaming":[192],"environments.":[195]},"counts_by_year":[],"updated_date":"2026-06-15T08:34:33.830935","created_date":"2026-05-22T00:00:00"}