{"id":"https://openalex.org/W3002629079","doi":"https://doi.org/10.1093/cybsec/tyaa004","title":"Data presentation in security operations centres: exploring the potential for sonification to enhance existing practice","display_name":"Data presentation in security operations centres: exploring the potential for sonification to enhance existing practice","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3002629079","doi":"https://doi.org/10.1093/cybsec/tyaa004","mag":"3002629079"},"language":"en","primary_location":{"id":"doi:10.1093/cybsec/tyaa004","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaa004","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/6/1/tyaa004/32708660/tyaa004.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://academic.oup.com/cybersecurity/article-pdf/6/1/tyaa004/32708660/tyaa004.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037114496","display_name":"Louise Axon","orcid":"https://orcid.org/0000-0001-5979-7630"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Louise Axon","raw_affiliation_strings":["Department of Computer Science, University of Oxford, Oxford OX1 3QD, UK"],"raw_orcid":"https://orcid.org/0000-0001-5979-7630","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, Oxford OX1 3QD, UK","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060392072","display_name":"Bushra Alahmadi","orcid":"https://orcid.org/0000-0003-1917-4871"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Bushra A AlAhmadi","raw_affiliation_strings":["Department of Computer Science, University of Oxford, Oxford OX1 3QD, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, Oxford OX1 3QD, UK","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075453550","display_name":"Jason R. C. Nurse","orcid":"https://orcid.org/0000-0003-4118-1680"},"institutions":[{"id":"https://openalex.org/I20581793","display_name":"University of Kent","ror":"https://ror.org/00xkeyj56","country_code":"GB","type":"education","lineage":["https://openalex.org/I20581793"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jason R C Nurse","raw_affiliation_strings":["School of Computing, University of Kent, Canterbury, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing, University of Kent, Canterbury, UK","institution_ids":["https://openalex.org/I20581793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063148097","display_name":"Michael Goldsmith","orcid":"https://orcid.org/0000-0001-7808-0600"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Michael Goldsmith","raw_affiliation_strings":["Department of Computer Science, University of Oxford, Oxford OX1 3QD, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, Oxford OX1 3QD, UK","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004437304","display_name":"Sadie Creese","orcid":"https://orcid.org/0000-0002-2414-9657"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Sadie Creese","raw_affiliation_strings":["Department of Computer Science, University of Oxford, Oxford OX1 3QD, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, Oxford OX1 3QD, UK","institution_ids":["https://openalex.org/I40120149"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5037114496"],"corresponding_institution_ids":["https://openalex.org/I40120149"],"apc_list":{"value":1864,"currency":"USD","value_usd":1864},"apc_paid":{"value":1864,"currency":"USD","value_usd":1864},"fwci":0.6702,"has_fulltext":true,"cited_by_count":10,"citation_normalized_percentile":{"value":0.70243911,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"6","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10803","display_name":"Innovative Human-Technology Interaction","score":0.9761999845504761,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9564999938011169,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sonification","display_name":"Sonification","score":0.9848361611366272},{"id":"https://openalex.org/keywords/presentation","display_name":"Presentation (obstetrics)","score":0.7570623159408569},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5695012807846069},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.542949914932251},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.5308120250701904},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.49875307083129883},{"id":"https://openalex.org/keywords/human-multitasking","display_name":"Human multitasking","score":0.4948050379753113},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.4115050435066223},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37762874364852905},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.2875184714794159},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.16220822930335999},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1219778060913086},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.0832531750202179},{"id":"https://openalex.org/keywords/cognitive-psychology","display_name":"Cognitive psychology","score":0.07315567135810852}],"concepts":[{"id":"https://openalex.org/C91607612","wikidata":"https://www.wikidata.org/wiki/Q1416058","display_name":"Sonification","level":2,"score":0.9848361611366272},{"id":"https://openalex.org/C2777601897","wikidata":"https://www.wikidata.org/wiki/Q3409113","display_name":"Presentation (obstetrics)","level":2,"score":0.7570623159408569},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5695012807846069},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.542949914932251},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.5308120250701904},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.49875307083129883},{"id":"https://openalex.org/C107418235","wikidata":"https://www.wikidata.org/wiki/Q1520565","display_name":"Human multitasking","level":2,"score":0.4948050379753113},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.4115050435066223},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37762874364852905},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2875184714794159},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.16220822930335999},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1219778060913086},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0832531750202179},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.07315567135810852},{"id":"https://openalex.org/C126838900","wikidata":"https://www.wikidata.org/wiki/Q77604","display_name":"Radiology","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1093/cybsec/tyaa004","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaa004","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/6/1/tyaa004/32708660/tyaa004.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:kar.kent.ac.uk:79587","is_oa":false,"landing_page_url":"https://doi.org/10.1093/cybsec%2Ftyaa004>)","pdf_url":null,"source":{"id":"https://openalex.org/S4377196264","display_name":"Kent Academic Repository (University of Kent)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I20581793","host_organization_name":"University of Kent","host_organization_lineage":["https://openalex.org/I20581793"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"pmh:oai:ora.ox.ac.uk:uuid:c25b3d6d-fd0d-4294-a856-b15f94cc0bf1","is_oa":true,"landing_page_url":"https://ora.ox.ac.uk/objects/uuid:c25b3d6d-fd0d-4294-a856-b15f94cc0bf1","pdf_url":null,"source":{"id":"https://openalex.org/S4306402636","display_name":"Oxford University Research Archive (ORA) (University of Oxford)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40120149","host_organization_name":"University of Oxford","host_organization_lineage":["https://openalex.org/I40120149"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symplectic Elements at Oxford","raw_type":"Journal article"}],"best_oa_location":{"id":"doi:10.1093/cybsec/tyaa004","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaa004","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/6/1/tyaa004/32708660/tyaa004.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G457395669","display_name":"Oxford University Centre for Doctoral Training in Cyber Security","funder_award_id":"EP/K035606/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8527692473","display_name":null,"funder_award_id":"EP/S018964/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W3002629079.pdf"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W1494756088","https://openalex.org/W1946320230","https://openalex.org/W1976990110","https://openalex.org/W1988453576","https://openalex.org/W2003554883","https://openalex.org/W2021026018","https://openalex.org/W2037001540","https://openalex.org/W2061141931","https://openalex.org/W2063466632","https://openalex.org/W2076691609","https://openalex.org/W2089858241","https://openalex.org/W2095478627","https://openalex.org/W2101628359","https://openalex.org/W2108353880","https://openalex.org/W2113147897","https://openalex.org/W2115811139","https://openalex.org/W2119555207","https://openalex.org/W2184854514","https://openalex.org/W2258520225","https://openalex.org/W2313795952","https://openalex.org/W2466158603","https://openalex.org/W2478800122","https://openalex.org/W2480906435","https://openalex.org/W2491409387","https://openalex.org/W2615396116","https://openalex.org/W2724612790","https://openalex.org/W2769512728","https://openalex.org/W2780310278","https://openalex.org/W2807741105","https://openalex.org/W2922132587","https://openalex.org/W4235683296","https://openalex.org/W6692319491","https://openalex.org/W6740161652"],"related_works":["https://openalex.org/W4304099409","https://openalex.org/W2131473689","https://openalex.org/W4282937034","https://openalex.org/W2170857870","https://openalex.org/W1571722761","https://openalex.org/W2095863029","https://openalex.org/W1496929008","https://openalex.org/W4200533225","https://openalex.org/W3201716672","https://openalex.org/W2805305763"],"abstract_inverted_index":{"Abstract":[0],"Security":[1,5],"practitioners":[2,43,126,135,201],"working":[3,142,202,226],"in":[4,44,57,74,77,128,167,203,219,224,234,307,317,323,327,336,338],"Operations":[6],"Centres":[7],"(SOCs)":[8],"are":[9,80,211],"responsible":[10],"for":[11,253],"detecting":[12],"and":[13,27,30,47,169,194,259,266,277,285,299],"mitigating":[14],"malicious":[15],"computer":[16],"network":[17,38],"activity.":[18],"This":[19],"work":[20,94,283,306,348],"requires":[21],"both":[22],"automated":[23],"tools":[24,33,73],"that":[25,34,92],"detect":[26],"prevent":[28],"attacks,":[29],"data":[31,64,79,98,173,272],"presentation":[32,99,174,273],"can":[35],"present":[36],"pertinent":[37],"security":[39,71,134,200,310],"monitoring":[40,120,311,341],"information":[41],"to":[42,63,86,101,117,157,164,288,304,321],"an":[45,90,188,229,247],"efficient":[46],"comprehensible":[48],"manner.":[49],"In":[50],"recent":[51],"years,":[52],"advances":[53],"have":[54,87,144],"been":[55,115,147],"made":[56],"the":[58,105,172,181,217,232,250,254,263,270,296,354],"development":[59],"of":[60,69,104,121,133,152,183,187,206,216,231,249,256,269,279,301,353],"visual":[61,97,271],"approaches":[62,100,175],"presentation,":[65],"with":[66,199,346],"some":[67,103],"uptake":[68],"advanced":[70],"visualization":[72],"SOCs.":[75,110,130,208],"Sonification":[76],"which":[78,123,220,235,339],"represented":[81],"as":[82,89,330,333,335],"sound,":[83],"is":[84,156,342],"said":[85],"potential":[88,297,315],"approach":[91],"could":[93,124,222],"alongside":[95,284],"existing":[96],"address":[102,158,286],"unique":[106],"challenges":[107,287,300],"faced":[108],"by":[109,161,170],"For":[111],"example,":[112],"sonification":[113,138,166,221,236,257,281,303,319],"has":[114],"shown":[116],"enable":[118],"peripheral":[119,340],"processes,":[122],"aid":[125,223,322],"multitasking":[127,345],"busy":[129],"The":[131,150],"perspectives":[132],"on":[136,180],"incorporating":[137],"into":[139,262,295],"their":[140,260],"actual":[141],"environments":[143],"not":[145,238],"yet":[146],"examined,":[148],"however.":[149],"aim":[151],"this":[153,159,308],"article,":[154],"therefore,":[155],"gap":[160],"exploring":[162],"attitudes":[163],"using":[165,289,318],"SOCs":[168,328],"identifying":[171],"currently":[176,275],"used.":[177],"We":[178],"report":[179],"results":[182],"a":[184,204,213],"study":[185],"consisting":[186],"online":[189],"survey":[190],"(N":[191,196],"=":[192,197],"20)":[193],"interviews":[195],"21)":[198],"range":[205],"different":[207],"Our":[209,291],"contributions":[210],"(i)":[212],"refined":[214],"appreciation":[215],"contexts":[218],"SOC":[225,264],"practice,":[227],"(ii)":[228],"understanding":[230],"areas":[233],"may":[237,242],"be":[239,244],"beneficial":[240],"or":[241,350],"even":[243],"problematic,":[245],"(iii)":[246],"analysis":[248],"critical":[251],"requirements":[252],"design":[255],"systems":[258,320],"integration":[261],"setting":[265],"(iv)":[267],"evidence":[268],"techniques":[274],"used":[276],"identification":[278],"how":[280],"might":[282],"them.":[290],"findings":[292],"clarify":[293],"insights":[294],"benefits":[298],"introducing":[302],"support":[305],"vital":[309],"environment.":[312],"Participants":[313],"saw":[314],"value":[316],"anomaly":[324],"detection":[325],"tasks":[326],"(such":[329],"retrospective":[331],"hunting),":[332],"well":[334],"situations":[337],"desirable:":[343],"while":[344,351],"multiple":[347],"tasks,":[349],"outside":[352],"SOC.":[355]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}