LITE-SOC: Lightweight Security Operations Center Simulator for Cybersecurity Education

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Higgins, Martin, Thompson, Shawn, Mangla, Cherry
Format: Preprint
Published: 2026
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866916021274673152
author Higgins, Martin
Thompson, Shawn
Mangla, Cherry
author_facet Higgins, Martin
Thompson, Shawn
Mangla, Cherry
contents This innovative practice WIP paper describes \emph{LITE-SOC}, a lightweight web-based Security Operations Center (SOC) simulator designed for instructor-led cybersecurity education. SOC analysts must triage large volumes of alerts, separate genuine threats from false positives, and communicate decisions under time pressure. Recreating this environment in the classroom is difficult and often impractical for institutions without access to cyber ranges or enterprise security infrastructure. LITE-SOC was developed to provide a simpler alternative. The platform generates continuous streams of synthetic SOC events and offers separate student and instructor views with visualization tools, event annotation, and region-based chat. Instructors control the pacing of the exercise and can inject targeted incidents to guide the scenario. The goal is to give students a practical introduction to SOC workflows such as triage, prioritization, and decision-making without requiring a full operational SOC environment. The platform is intended for use in guided classroom exercises where students collaboratively investigate alerts and practice real-time triage and communication.
format Preprint
id arxiv_https___arxiv_org_abs_2605_17703
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle LITE-SOC: Lightweight Security Operations Center Simulator for Cybersecurity Education
Higgins, Martin
Thompson, Shawn
Mangla, Cherry
Cryptography and Security
Human-Computer Interaction
This innovative practice WIP paper describes \emph{LITE-SOC}, a lightweight web-based Security Operations Center (SOC) simulator designed for instructor-led cybersecurity education. SOC analysts must triage large volumes of alerts, separate genuine threats from false positives, and communicate decisions under time pressure. Recreating this environment in the classroom is difficult and often impractical for institutions without access to cyber ranges or enterprise security infrastructure. LITE-SOC was developed to provide a simpler alternative. The platform generates continuous streams of synthetic SOC events and offers separate student and instructor views with visualization tools, event annotation, and region-based chat. Instructors control the pacing of the exercise and can inject targeted incidents to guide the scenario. The goal is to give students a practical introduction to SOC workflows such as triage, prioritization, and decision-making without requiring a full operational SOC environment. The platform is intended for use in guided classroom exercises where students collaboratively investigate alerts and practice real-time triage and communication.
title LITE-SOC: Lightweight Security Operations Center Simulator for Cybersecurity Education
topic Cryptography and Security
Human-Computer Interaction
url https://arxiv.org/abs/2605.17703