3D CyberCOP: a Collaborative Platform for Cybersecurity Data Analysis and Training

Alexandre Kabil (1, 2) , Thierry Duval (2, 1) , Nora Cuppens (3, 4) , Gérard Le Comte (5) , Yoran Halgand (6) , Christophe Ponchel (7)

1 Lab-STICC_IMTA_CID_IHSEV
2 IMT Atlantique - LUSSI - Département Logique des Usages, Sciences sociales et Sciences de l'Information
3 Lab-STICC_IMTA_CID_IRIS
4 IMT Atlantique - SRCD - Département Systèmes Réseaux, Cybersécurité et Droit du numérique
5 Société Générale
6 EDF - EDF
7 Airbus Defence & Space [Elancourt] (Airbus group)

Although Immersive Analytics solutions are now developed in order to ease data analysis, cyber security systems are still using classical graphical representations and are not harnessing yet the potential of virtual reality systems and collaborative virtual environments. 3D Col-laborative Virtual Environments (3DCVE) can be used in order to merge learning and data analysis approaches, as they can allow users to have a better understanding of a cyber situation by mediating interactions towards them and also by providing different points of view of the same data, on different scales. So we propose a 3D Cyber Common Operational Picture (3D CyberCOP) that will allow operators to face together a situation by using immersive and non immersive visualizations and by collaborating through user-defined roles. After visiting French Security Operations Centers (SOCs), we have defined a collaborative interaction model and some use-cases, to assess of the effectiveness of our solution.

Domaines: Synthèse d'image et réalité virtuelle [cs.GR]; Interface homme-machine [cs.HC]; Cryptographie et sécurité [cs.CR]

Alexandre Kabil, Thierry Duval, Nora Cuppens, Gérard Le Comte, Yoran Halgand, et al.. 3D CyberCOP: a Collaborative Platform for Cybersecurity Data Analysis and Training. CDVE 2018 : 15th International Conference on Cooperative Design, Visualization and Engineering, Oct 2018, Hangzou, China. pp.176-183, ⟨10.1007/978-3-030-00560-3_24⟩. ⟨hal-01831965⟩