{"id":"https://openalex.org/W2943546107","doi":"https://doi.org/10.1145/3305268","title":"A Multi-Vocal Review of Security Orchestration","display_name":"A Multi-Vocal Review of Security Orchestration","publication_year":2019,"publication_date":"2019-04-30","ids":{"openalex":"https://openalex.org/W2943546107","doi":"https://doi.org/10.1145/3305268","mag":"2943546107"},"language":"en","primary_location":{"id":"doi:10.1145/3305268","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3305268","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"review","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2002.09190","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012225295","display_name":"Chadni Islam","orcid":"https://orcid.org/0000-0002-6349-6483"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I5681781","display_name":"University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Chadni Islam","raw_affiliation_strings":["University of Adelaide, CREST - The Centre for Research on Engineering Software Technologies, and Data61, CSIRO, Australia"],"affiliations":[{"raw_affiliation_string":"University of Adelaide, CREST - The Centre for Research on Engineering Software Technologies, and Data61, CSIRO, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916","https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103075476","display_name":"Muhammad Ali Babar","orcid":"https://orcid.org/0000-0001-9696-3626"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Muhammad Ali Babar","raw_affiliation_strings":["University of Adelaide and CREST - The Centre for Research on Engineering Software Technologies, Australia"],"affiliations":[{"raw_affiliation_string":"University of Adelaide and CREST - The Centre for Research on Engineering Software Technologies, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082256444","display_name":"\u202aSurya Nepal\u202c","orcid":"https://orcid.org/0000-0002-3289-6599"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Surya Nepal","raw_affiliation_strings":["Data61, CSIRO, Australia"],"affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5012225295"],"corresponding_institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916","https://openalex.org/I5681781"],"apc_list":null,"apc_paid":null,"fwci":6.3635,"has_fulltext":false,"cited_by_count":84,"citation_normalized_percentile":{"value":0.97307364,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"52","issue":"2","first_page":"1","last_page":"45"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/orchestration","display_name":"Orchestration","score":0.8933348655700684},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8159788846969604},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.4801577925682068},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.401626855134964},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.33187466859817505},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3042265772819519}],"concepts":[{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.8933348655700684},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8159788846969604},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.4801577925682068},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.401626855134964},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.33187466859817505},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3042265772819519},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C558565934","wikidata":"https://www.wikidata.org/wiki/Q2743","display_name":"Musical","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3305268","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3305268","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2002.09190","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2002.09190","pdf_url":"https://arxiv.org/pdf/2002.09190","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2002.09190","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2002.09190","pdf_url":"https://arxiv.org/pdf/2002.09190","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W1487840171","https://openalex.org/W1556808170","https://openalex.org/W1573632859","https://openalex.org/W1585659215","https://openalex.org/W1967841167","https://openalex.org/W1968729336","https://openalex.org/W1991344121","https://openalex.org/W2005058514","https://openalex.org/W2023250288","https://openalex.org/W2040146912","https://openalex.org/W2049644624","https://openalex.org/W2054876969","https://openalex.org/W2065159774","https://openalex.org/W2072580964","https://openalex.org/W2075250301","https://openalex.org/W2081178073","https://openalex.org/W2103458796","https://openalex.org/W2103907873","https://openalex.org/W2103909875","https://openalex.org/W2106956101","https://openalex.org/W2107513911","https://openalex.org/W2108025693","https://openalex.org/W2108966261","https://openalex.org/W2113147897","https://openalex.org/W2140774254","https://openalex.org/W2145338466","https://openalex.org/W2148662091","https://openalex.org/W2156089184","https://openalex.org/W2167479959","https://openalex.org/W2168981961","https://openalex.org/W2186518648","https://openalex.org/W2249562068","https://openalex.org/W2276311219","https://openalex.org/W2278186031","https://openalex.org/W2319607193","https://openalex.org/W2345039647","https://openalex.org/W2366193076","https://openalex.org/W2407772516","https://openalex.org/W2465496489","https://openalex.org/W2471697135","https://openalex.org/W2480325961","https://openalex.org/W2500040392","https://openalex.org/W2512714308","https://openalex.org/W2533908554","https://openalex.org/W2538865281","https://openalex.org/W2547209441","https://openalex.org/W2568683544","https://openalex.org/W2576494997","https://openalex.org/W2591204490","https://openalex.org/W2598491244","https://openalex.org/W2599014521","https://openalex.org/W2612493356","https://openalex.org/W2766428736","https://openalex.org/W2914190735","https://openalex.org/W4241149828","https://openalex.org/W4255264342","https://openalex.org/W4391294936","https://openalex.org/W4392729085","https://openalex.org/W4399659179"],"related_works":["https://openalex.org/W79913212","https://openalex.org/W2094884983","https://openalex.org/W2378898096","https://openalex.org/W4210648132","https://openalex.org/W2033357182","https://openalex.org/W3086216911","https://openalex.org/W2735050489","https://openalex.org/W64368977","https://openalex.org/W2800653357","https://openalex.org/W147109933"],"abstract_inverted_index":{"Organizations":[0],"use":[1],"diverse":[2],"types":[3],"of":[4,57,69,78,83,126,146,154,171,180,194,207,221],"security":[5,13,31,45,55,70,84,127,147,155,173,181,195,227],"solutions":[6,14,32],"to":[7,28,33,53,93,141,217],"prevent":[8],"cyber-attacks.":[9],"Multiple":[10],"vendors":[11],"provide":[12,142,191],"developed":[15],"using":[16],"heterogeneous":[17],"technologies":[18],"and":[19,50,67,96,111,115,149,162,176,186,209,224],"paradigms.":[20],"Hence,":[21],"it":[22],"is":[23],"a":[24,58,103,143,172,192],"challenging":[25],"rather":[26],"impossible":[27],"easily":[29],"make":[30],"work":[34],"an":[35,75],"integrated":[36],"fashion.":[37],"Security":[38,59],"orchestration":[39,85,128,148,156,174,182,196],"aims":[40],"at":[41],"smoothly":[42],"integrating":[43],"multivendor":[44],"tools":[46],"that":[47,107],"can":[48],"effectively":[49],"efficiently":[51],"interoperate":[52],"support":[54],"staff":[56],"Operation":[60],"Centre":[61],"(SOC).":[62],"Given":[63],"the":[64,98,151,168,178,199],"increasing":[65,76],"role":[66],"importance":[68],"orchestration,":[71,161],"there":[72,88],"has":[73,89,108,138,214],"been":[74,90],"amount":[77],"literature":[79,122],"on":[80,123,184,198],"different":[81,124],"aspects":[82,125],"solutions.":[86,100],"However,":[87],"no":[91],"effort":[92],"systematically":[94,109],"review":[95,137,213],"analyze":[97],"reported":[99],"We":[101,164,189],"report":[102],"Multivocal":[104],"Literature":[105],"Review":[106],"selected":[110],"reviewed":[112],"both":[113],"academic":[114],"grey":[116],"(blogs,":[117],"web":[118],"pages,":[119],"white":[120],"papers)":[121],"published":[129],"from":[130],"January":[131],"2007":[132],"until":[133],"July":[134],"2017.":[135],"The":[136],"enabled":[139],"us":[140,216],"working":[144],"definition":[145],"classify":[150],"main":[152,159],"functionalities":[153],"into":[157],"three":[158],"areas\u2014unification,":[160],"automation.":[163],"have":[165],"also":[166,190],"identified":[167],"core":[169],"components":[170],"platform":[175],"categorized":[177],"drivers":[179],"based":[183,197],"technical":[185],"socio-technical":[187],"aspects.":[188],"taxonomy":[193],"execution":[200],"environment,":[201],"automation":[202],"strategy,":[203],"deployment":[204],"type,":[205],"mode":[206],"task":[208],"resource":[210],"type.":[211],"This":[212],"helped":[215],"reveal":[218],"several":[219],"areas":[220],"further":[222],"research":[223],"development":[225],"in":[226],"orchestration.":[228]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":15},{"year":2022,"cited_by_count":13},{"year":2021,"cited_by_count":17},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":2}],"updated_date":"2026-03-10T16:38:18.471706","created_date":"2025-10-10T00:00:00"}