{"id":"https://openalex.org/W4408343551","doi":"https://doi.org/10.1145/3723158","title":"Alert Fatigue in Security Operations Centres: Research Challenges and Opportunities","display_name":"Alert Fatigue in Security Operations Centres: Research Challenges and Opportunities","publication_year":2025,"publication_date":"2025-03-12","ids":{"openalex":"https://openalex.org/W4408343551","doi":"https://doi.org/10.1145/3723158"},"language":"en","primary_location":{"id":"doi:10.1145/3723158","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3723158","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3723158","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003311970","display_name":"Shahroz Tariq","orcid":"https://orcid.org/0000-0001-9090-0579"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shahroz Tariq","raw_affiliation_strings":["Data61, CSIRO, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9090-0579","affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000678710","display_name":"Mohan Baruwal Chhetri","orcid":"https://orcid.org/0000-0002-6138-7742"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mohan Baruwal Chhetri","raw_affiliation_strings":["Data61, CSIRO, Melbourne Australia"],"raw_orcid":"https://orcid.org/0000-0002-6138-7742","affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Melbourne Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082256444","display_name":"\u202aSurya Nepal\u202c","orcid":"https://orcid.org/0000-0002-3289-6599"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Surya Nepal","raw_affiliation_strings":["Data61, CSIRO, Sydney, Australia","Data61, CSIRO, Sydney Australia"],"raw_orcid":"https://orcid.org/0000-0002-3289-6599","affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]},{"raw_affiliation_string":"Data61, CSIRO, Sydney Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077002072","display_name":"C\u00e9cile Paris","orcid":"https://orcid.org/0000-0003-3816-0176"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Cecile Paris","raw_affiliation_strings":["Data61, CSIRO, Sydney, Australia","Data61, CSIRO, Sydney Australia"],"raw_orcid":"https://orcid.org/0000-0003-3816-0176","affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]},{"raw_affiliation_string":"Data61, CSIRO, Sydney Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":30.011,"has_fulltext":false,"cited_by_count":58,"citation_normalized_percentile":{"value":0.99904777,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"57","issue":"9","first_page":"1","last_page":"38"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10444","display_name":"Context-Aware Activity Recognition Systems","score":0.9886999726295471,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8363126516342163},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39667901396751404},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.33443892002105713}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8363126516342163},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39667901396751404},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.33443892002105713}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3723158","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3723158","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3723158","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3723158","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":70,"referenced_works":["https://openalex.org/W1539979365","https://openalex.org/W1972908840","https://openalex.org/W2028680669","https://openalex.org/W2044936748","https://openalex.org/W2070036949","https://openalex.org/W2132068130","https://openalex.org/W2498748691","https://openalex.org/W2535690855","https://openalex.org/W2601591590","https://openalex.org/W2605753964","https://openalex.org/W2739823785","https://openalex.org/W2793461878","https://openalex.org/W2802236629","https://openalex.org/W2803342829","https://openalex.org/W2804207136","https://openalex.org/W2886599162","https://openalex.org/W2889160738","https://openalex.org/W2903912339","https://openalex.org/W2911518933","https://openalex.org/W2950757722","https://openalex.org/W2959987720","https://openalex.org/W2964634704","https://openalex.org/W2984363868","https://openalex.org/W2986291326","https://openalex.org/W2997993688","https://openalex.org/W3013184828","https://openalex.org/W3015650867","https://openalex.org/W3030326053","https://openalex.org/W3030364939","https://openalex.org/W3040915855","https://openalex.org/W3046399757","https://openalex.org/W3046710459","https://openalex.org/W3081093222","https://openalex.org/W3089968098","https://openalex.org/W3108481873","https://openalex.org/W3111000109","https://openalex.org/W3111749540","https://openalex.org/W3162428030","https://openalex.org/W3197466741","https://openalex.org/W3198775197","https://openalex.org/W3205626500","https://openalex.org/W3208916046","https://openalex.org/W3211484264","https://openalex.org/W3211888892","https://openalex.org/W3212401499","https://openalex.org/W3214329506","https://openalex.org/W3216622316","https://openalex.org/W4200229541","https://openalex.org/W4206985935","https://openalex.org/W4210262502","https://openalex.org/W4212809991","https://openalex.org/W4225675072","https://openalex.org/W4281618023","https://openalex.org/W4281727634","https://openalex.org/W4283703836","https://openalex.org/W4283799808","https://openalex.org/W4285228330","https://openalex.org/W4285719576","https://openalex.org/W4288058227","https://openalex.org/W4294691140","https://openalex.org/W4297964528","https://openalex.org/W4321160088","https://openalex.org/W4321459579","https://openalex.org/W4376647164","https://openalex.org/W4391334925","https://openalex.org/W4392923480","https://openalex.org/W4393928723","https://openalex.org/W4399187206","https://openalex.org/W4404405795","https://openalex.org/W4410636403"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"A":[0],"security":[1,11],"operations":[2],"centre":[3],"(SOC)":[4],"is":[5,50],"a":[6,143],"facility":[7],"where":[8],"teams":[9],"of":[10,35,64,105,120,130,146,164],"professionals,":[12],"supported":[13],"by":[14,55,80],"advanced":[15],"technologies":[16],"and":[17,24,48,58,67,79,95,108,133,150,187],"processes,":[18],"work":[19],"together":[20],"to":[21,26,83,156],"monitor,":[22],"detect,":[23],"respond":[25],"cybersecurity":[27],"incidents.":[28],"With":[29],"advances":[30],"in":[31,69,76,123,160,181],"AI":[32],"technology,":[33],"most":[34],"the":[36,62,77,81,92,103,113,128,147,157],"SOC":[37],"functions":[38],"are":[39],"increasingly":[40],"becoming":[41],"AI-driven.":[42],"Among":[43],"these,":[44],"real-time":[45],"alert":[46,65,99,121,177],"monitoring":[47],"triage":[49],"particularly":[51],"important.":[52],"Recent":[53],"studies,":[54],"both":[56],"industry":[57,82,96],"academia,":[59],"have":[60,73],"highlighted":[61],"problem":[63],"fatigue":[66,100,122,178],"burnout":[68],"SOC.":[70,124],"Several":[71],"solutions":[72,97,132],"been":[74],"proposed":[75],"literature":[78,94,159],"address":[84],"this":[85,88,153],"problem.":[86],"In":[87],"article,":[89],"we":[90,115],"review":[91],"existing":[93,131,158],"on":[98,112],"mitigation":[101],"through":[102],"lenses":[104],"automation,":[106],"augmentation,":[107],"human\u2013AI":[109],"collaboration.":[110],"Based":[111],"review,":[114],"identify":[116],"four":[117],"major":[118],"causes":[119],"We":[125,166],"also":[126],"examine":[127],"shortcomings":[129],"propose":[134],"several":[135],"potential":[136],"research":[137,173],"directions":[138,174],"leveraging":[139],"AI.":[140],"By":[141],"providing":[142],"comprehensive":[144],"analysis":[145],"state-of-the-art":[148],"approaches":[149],"their":[151],"limitations,":[152],"study":[154],"contributes":[155],"an":[161],"important":[162],"field":[163],"study.":[165],"anticipate":[167],"that":[168],"it":[169],"will":[170],"inspire":[171],"new":[172],"for":[175],"addressing":[176],"not":[179],"just":[180],"SOCs":[182],"but":[183],"across":[184],"other":[185],"Command":[186],"Control":[188],"(C2)":[189],"domains":[190],"as":[191],"well.":[192]},"counts_by_year":[{"year":2026,"cited_by_count":39},{"year":2025,"cited_by_count":19}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}
