LITE-SOC: Lightweight Security Operations Center Simulator for Cybersecurity Education

TL;DR

LITE-SOC is a web-based SOC simulator designed for cybersecurity education, enabling students to practice triage and decision-making in a controlled, classroom environment without needing full security infrastructure.

Contribution

It introduces a lightweight, interactive platform that simulates SOC workflows for educational purposes, facilitating practical cybersecurity training in classrooms.

Findings

Provides synthetic SOC events for realistic training

Includes instructor controls and visualization tools

Enables collaborative student exercises

Abstract

This innovative practice WIP paper describes \emph{LITE-SOC}, a lightweight web-based Security Operations Center (SOC) simulator designed for instructor-led cybersecurity education. SOC analysts must triage large volumes of alerts, separate genuine threats from false positives, and communicate decisions under time pressure. Recreating this environment in the classroom is difficult and often impractical for institutions without access to cyber ranges or enterprise security infrastructure. LITE-SOC was developed to provide a simpler alternative. The platform generates continuous streams of synthetic SOC events and offers separate student and instructor views with visualization tools, event annotation, and region-based chat. Instructors control the pacing of the exercise and can inject targeted incidents to guide the scenario. The goal is to give students a practical introduction to SOC workflows such as triage, prioritization, and decision-making without requiring a full operational SOC environment. The platform is intended for use in guided classroom exercises where students collaboratively investigate alerts and practice real-time triage and communication.