Raciocínio baseado em casos como uma técnica para gestão do conhecimento da resolução de incidentes de segurança

Abstract

This work demonstrates the importance of applying computing techniques in to the knowledge management of cybersecurity incidents, offering a metodological approach for the retention and reuse of the specialist’s knowledge aiming the resolution of new incidents. The information security specialist’s knlowledge is central for organizations, because the effective resolution of incidents depends on their knowledge. However organizations should not be totally dependent on their employees. Thus, the proposed metodology uses Cased-based Reasoning with weighted attributes and the IODEF pattern for the representation of those incidents, aiming the retention of the specialist’s knowledge on the incidents resolution, allowing other organization members to perform similar tasks, decreasing the dependancy between the company and its employees. The results demonstrate that with this metodology the knowledge is effectively retained in the case-base and that new employees can be benefited from the recomendations built and provided by the system, improoving the knowledge retention in organizations.