[Academic] SOC analyst decision-making: review a series of network security alerts (18+, ~10-15 min, all backgrounds welcome)
Source Reddit BlueTeam
Discussion
This entry describes an academic study simulating SOC analyst decision-making by having participants review a series of network security alerts. It is a research activity designed to understand how people assess IDS alerts, with no indication of an actual security vulnerability or threat.
r/AskNetsec (opens in a new tab)u/West_Lifeguard32090 points0 comments
Hi all,
I'm an MSc Cyber Security student at the University of Gloucestershire running a short online study for my dissertation on how people make decisions when reviewing intrusion detection system (IDS) alerts.
What you'll do: You'll be shown a series of realistic network security alerts one at a time and asked, for each one, whether you'd confirm, dismiss, or escalate it, plus how confident you are in that call. There's a brief practice round first, and a few short questions at the end. No prior security experience is required; the interface explains everything you need.
Details:
- ⏱️ Takes about 10–15 minutes
- 💻 Works on desktop or phone (browser only, nothing to install)
- 🔒 Anonymous - no names collected; you can withdraw at any time
- ✅ 18+, ethics-approved by the University of Gloucestershire
- 🎓 Students and working professionals both welcome
Link: http://dissertation-explainids.uogs.co.uk
Every response genuinely helps me hit my sample target - thank you so much for your time!
Links cited in the discussion
Also discussed in r/cybersecurity