Data-driven security is all the rage. But what is the data? Is it a concrete truth of unerring accuracy? Is it a bunch of numbers made up to suit someone's agenda? In this talk, we will explore the process that went into producing the data and analysis for the 2016 Verizon Data Breach Investigations report, with an eye towards lessons that you can take away and apply to the datasets you manage. There's a reason the DBIR team says it takes more time to collect the data for the DBIR than to write it! From challenges and solutions to compromises and frustrations, we will give the audience a chance to learn from our experience what it takes to manage a research dataset.
Gabriel (@gdbassett) is the senior information security data scientist specializing in data science, machine learning, and graph theory applications to cyber security on the Verizon Security Research team at Verizon Enterprise Solutions and a contributing author of the Verizon Data Breach Investigations Report and Protected Health Information Data Breach Report. He has previously held cyber security risk management, testing, intelligence, architect, and program management positions at the Missile Defense Agency and Hospital Corporation of America.
Anastasia (@mathl0v3r) is a mathematician on the Verizon Security Research team and a co-author of the 2016 Data Breach Investigations Report. She has a B.S. in Information Security, Computer Science and Mathematics and is pursuing her M.S. in Mathematics. In her previous role as a Security Analyst, she developed extensive Splunk experience and assisted in building out a security analytics program for a large pharmaceutical company.. In her free time, she pursues pure mathematics research in number and field theory.