Building a Cybersecurity Operations Center

Three IT security offices (Virginia Tech, Penn State, and Purdue) are building a cybersecurity operations center (CSOC) that will be the focal point for each institution's campus-wide cybersecurity infrastructure. The CSOC aggregates data from IDS, IPS, security reviews, vulnerability scanners, and other tools stored in various databases. The CSOC allows incident response team members to pull up a host's "security history" in a timely manner. This information can be used in incident response, security metrics, and security reviews. The CSOC is not a physical security center with surveillance cameras; it deals only with cybersecurity issues. Each institution will provide an overview of its CSOC initiatives.