Novel Architecture of Security Orchestration, Automation and Response in營nternet of Blended Environment

New technologies that take advantage of the emergence massive Internet Things (IoT) and a hyper-connected network environment have rapidly increased in recent years. These are used diverse environments, such as smart factories, digital healthcare, grids, with security concerns. We intend to operate Security Orchestration, Automation Response (SOAR) various environments through new concept definitions need detect respond automatically increasing incidents without intervention personnel has emerged. To facilitate understanding concern involved this newly emerging area, we offer definition Blended Environment (IoBE) where convergence interconnected data analyzed automation. define Threat (BT) threat exploits vulnerabilities attack surfaces IoBE. propose novel SOAR-CUBE architecture minimal human by automating BT response process. The Automation, part our is link heterogeneous intelligence function collects performs correlation analysis data. SOAR operated under Collaborative Units (CUBE) which facilitates dynamic exchanges according applied IoBE distributing deploying for each type dynamically combining them cyber kill chain stage minimize damage efficiently BT.