A Framework Design to Improve and Evaluate the Performance of Security Operation Center (SOC)

In this 21st century, we have seen a major rise in the use of advanced technological devices. It is well known that these devices generate a huge amount of data. These data end up being the major target for cyber attackers. In order to monitor and protect these devices that are connected to the internet, Security Operation Center (SOC) was developed. The Security operation Center consists of various security professionals. These Analysts constantly monitor the network traffic for any malicious activity in the network. To this date, for operating a Security Operation Center (SOC) there is no standardised framework available. So, this research develops a SOC framework which is expected to improve the performance of the SOC. This research also provides a statistical way to express the performance of the SOC in terms of metrics