3 ms·
>Also, I think studying data science is underrated for cybersec. Can you elaborate? I know a lot of security teams will have large amounts of machine data thro
by FLUX-YOU 8y ago
>Also, I think studying data science is underrated for cybersec.
Can you elaborate? I know a lot of security teams will have large amounts of machine data thrown into ELK or Splunk, but that seems like qualitative data and so there's not a lot of number-crunching to do.
- time0ut 8y agoThings like fraud detection come to mind. Being able to build a model based on previously detected bad actors and then use that model to detect possible additional bad actors is a specialized but useful skill in some contexts.
- xapata 8y agoStatistical anomaly detection is quite valuable.
- 3pt14159 8y agoThere's just so many things that are helpful from data science. Graph Analysis => Saw some guys turn the Android codebase into a graph and use that to turn a dozen minor exploits into a chain that gave them root. Pwn2own IIRC. Statistics => Great for detecting anomalies / understanding how to evaluate manipulation of cyber adjacent systems. For example, understanding the beta distribution lets you figure out how someone will game ratings in your app store to beat out legitimate apps with similar sounding ones. And of course all of these things cut both ways: if you're on red team it helps you masquerade more effectively. Recommenders => Obviously useful to understand from attack detection, spam filter evasion, etc. Linguistic analysis => De-anon attackers by the language they use. Figure out automatically which email accounts have been owned by sudden changes in speech usage.
- itronitron 8y agoif you have enough qualitative data it becomes quantitative data and you can start do fun stuff with that