HPBigData2015Predicting Cyber Security Industry-JohnPark

Nov 18, 20151 like376 views

This document discusses using natural language processing (NLP) to analyze cybersecurity industry data and make predictions. Key findings from analyzing 2013-2014 data include the most frequent words ("malware", "security", "attack"), word pairs ("operating system", "targeted attack", "exploit kits"), mentions of security conferences, and national mentions. Predictions for 2015 extrapolate the top words will be "security", "attacks", "malware", "system", "data" and the top word pairs will be "operating system", "malware family", "exploit kits", "targeted attacks", "cyber security". Competitive analysis of other companies shows their most mentioned words. The document concludes security is about defending systems from attacks started

SEIZE THE DATA. 2015
PredictingCyberSecurityIndustry
HP Security Briefing 21
John Park/ August 11th, 2015

“What is happening with
computer security ?”

HPBigData2015Predicting Cyber Security Industry-JohnPark

Lesson #1: There is more info than one
can read in a lifetime.

Lesson #2: The more one reads, the
more it sounds the same.

Mass Media 101: Journalism
The more important it is,
the more it’s talked about.

Mass Media 102: Advertising
The more it’s talked about,
the more important it becomes.

Game Plan:
Count the number of words
and sequences of words (n-grams).

Data tip #1:
Start with a high-quality dataset.

NLP tip #1: Word (1-gram) frequency
shows the ingredients.

NLP tip #2: Word pair (2-grams) are
intersections. More niche.

NLP tip #3: 3+ grams are super-niche.
May be too unique.

NLP tip #4: Stemming
lowercase + substr(word,0,7)

NLP tip #5: Stop-words (is, the, ...)
Normalize against general text.
(go over the top 300 manually)

NLP tip #6:
If timeline analysis,
balance the “before” and the “after”.

NLP tip #7:
It’s always best to have final
human verification.
Use the common sense.
Find similar exploiters.

Without further ado,
let’s see some results.

Result #1: Top 5 words (2013+2014)
1. Malware
2. Security
3. Attack
4. System
5. Exploits

Result #2: Top 5 n-grams (2013+2014)
1. Operating System
2. Targeted Attack
3. Exploit Kits
4. United States
5. Social Engineering

Result #3: Security conferences
Black Hat
1. attack
2. security
3. presentation
4. system
5. talk
Def Con
1. security
2. talk
3. attack
4. network
5. hackers
Virus Bulletin
1. malware
2. system
3. security
4. app
5. detection

Result #4: National mentions
1. United States
2. Russia
3. China
4. Germany
5. Brazil

Prediction #1: Word frequency 2015
(extrapolated from 2013 + 2014)
1. Security (2)
2. Attacks (3)
3. Malware (1)
4. System (4)
5. Data (6)

Prediction #1: n-gram frequency 2015
(extrapolated from 2013 + 2014)
1. Operating System (1)
2. Malware Family (9)
3. Exploit Kits (3)
4. Targeted Attacks (2)
5. Cyber Security (19)

What we really want:
Competitive Analysis

What are other companies in the industry
working on?
Microsoft
1. computers
2. detected
3. exploits
4. Microsoft
5. malware
FireEye
1. attack
2. malware
3. targeted
4. FireEye
5. verticals
Verizon
1. data
2. incidents
3. breaches
4. attacks
5. organizations

Security is about defending the System
against Attacks, that start with Exploits
and controlled by Malware.

Sessão apresentada no Mind The Sec no dia 26 de Agosto de 2015. Esta sessão vai fazer uma exploração tecnológica bem-humorada de feeds de threat intelligence abertos e comerciais que têm sido tratados pelo mercado de segurança como a nova panacéia para resolver os desafios de monitoramento e resposta a incidentes. Mesmo que nem todo o mercado de threat intelligence possa ser reduzido a feeds de indicadores, eles têm atraído atenção suficiente do mercado para merecer uma análise científica e factual para que os tomadores de decisão possam maximizar os resultados obtidos com os dados disponíveis. Nos últimos 18 meses, a Niddel vem coletando indicadores de threat intelligence de múltiplas fontes, visando entender o ecossistema e desenvolver métricas de eficiência e qualidade para avaliar os diferentes feeds. Serão apresentadas análises factuais e baseadas em dados do viés estatístico, sobreposição, representatividade, idade de indicadores e unicidade entre diferentes feeds. Todos os dados utilizados será publicado e o código para geração dos gráficos está disponível em projetos open source chamados Combine e TIQ-Test. Estas são as mesmas técnicas e análises por trás da contribuição da Niddel no Verizon Data Breach Incident Report (DBIR) de 2015, um dos mais respeitados relatórios de segurança da informação do mundo. Esta apresentação também irá apresentar dados agregados de uso de comunidades de compartilhamento de threat intelligence, de forma a identificar os padrões reais de uso e as preocupações e benefícios que os gestores podem esperar deste tipo de iniciativa.

Analyzing Real Time NewsRaffaele Lorusso

��

Faking Sandy: Characterizing and Identifying Fake Images on Twitter during Hu...IIIT Hyderabad

��

In today's world, online social media plays a vital role during real world events, especially crisis events. There are both positive and negative effects of social media coverage of events, it can be used by authorities for effective disaster management or by malicious entities to spread rumors and fake news. The aim of this paper, is to highlight the role of Twitter, during Hurricane Sandy (2012) to spread fake images about the disaster. We identified 10,350 unique tweets containing fake images that were circulated on Twitter, during Hurricane Sandy. We performed a characterization analysis, to understand the temporal, social reputation and influence patterns for the spread of fake images. Eighty six percent of tweets spreading the fake images were retweets, hence very few were original tweets. Our results showed that top thirty users out of 10,215 users (0.3%) resulted in 90% of the retweets of fake images; also network links such as follower relationships of Twitter, contributed very less (only 11%) to the spread of these fake photos URLs. Next, we used classification models, to distinguish fake images from real images of Hurricane Sandy. Best results were obtained from Decision Tree classifier, we got 97% accuracy in predicting fake images from real. Also, tweet based features were very effective in distinguishing fake images tweets from real, while the performance of user based features was very poor. Our results, showed that, automated techniques can be used in identifying real images from fake images posted on Twitter.

Enabling effective hunt teaming and incident responsejeffmcjunkin

��

This document provides an overview of enabling effective hunt teaming and incident response with limited resources. It defines hunt teaming as proactively assuming compromise, finding compromised hosts, determining how they were compromised through forensics, and implementing preventative and detective controls. Incident response is defined as reactively noticing an incident, stopping any active threats, and learning from the incident to implement improved controls. The document discusses how most attacks actually occur based on data from breaches, and provides examples of low-cost tools and techniques that can be used for persistence and program execution tracking, centralized logging, and data exfiltration detection.

The Cyber Threat Intelligence Matrix: Taking the attacker eviction red pillFrode Hommedal

��

When you are responding to severe intrusions, it has been gospel for the past years to observe, learn and plan before your start cleaning up. This is very sound advice, and probably the only way you can successfully evict a determined and mission driven adversary from your networks. But when is the right time? When do you actually know enough to evict, and more importantly, resist immediate re-entry? Enter the Cyber Threat Intelligence Matrix.

How I Hacked The Government And Got Away With ItSteven Hatfield

��

NTXISSACSC3 - How I hacked the Government and Got Away with It by Seven HatfieldNorth Texas Chapter of the ISSA

��

This document summarizes how the speaker hacked into a government training website and downloaded training videos without authentication. They describe their multiple unsuccessful attempts to report the vulnerability to the government via email, Twitter, and other means. The document suggests ways for the government to improve security, such as implementing a bug bounty program, conducting code audits, and having a vulnerability management program. It concludes that the government is currently unresponsive to security issues and that improvements are needed to address vulnerabilities.

Art into Science 2017 - Investigation Theory: A Cognitive Approachchrissanders88

��

Threats that Matter - Murray State University 2017chrissanders88

��

The document discusses various cybersecurity threats including ransomware, espionage, and human factors. It provides recommendations for organizations to improve their security posture such as limiting administrative access, deploying centralized logging, implementing two-factor authentication, testing users with phishing simulations, and limiting ad network participation. The document examines the economics of security and classifies threats as being opportunistic, targeted, structured, or unstructured.

Jsm big-dataSean Taylor

��

This document discusses common limitations that arise when working with large datasets, or "big data". It outlines four main limitations: 1) Measuring the wrong thing if the available data does not directly measure the variable of interest. 2) Biased samples if the data is not representative of the target population. 3) Dependence if observations are not independent due to repeated measurements. 4) Uncommon support if qualifying cases that satisfy criteria like matching are rare in the data. For each limitation, common patterns are described and opportunities for addressing the issues through better measurement, modeling, or experimental design are presented. The conclusion emphasizes that generating high quality data is better than relying on convenience data alone, and there are research opportunities in overcoming limitations

Computer literacy - Lesson 2mmuller_edtech

��

The document discusses strategies for creating strong passwords to prevent hacking, including relating password strength to the game Mastermind. It suggests that longer, mixed passwords with letters, numbers, and symbols are harder to crack. The document directs users to websites about choosing passwords that are difficult to guess but easy to remember, and instructs students to summarize a password strategy on their blog and suggest a sample password following that strategy.

Agentless Patch Management for the Data CenterIvanti

��

Many organizations automate patch management in their end user environments, but often times the Data Center tends to be more manual. What if you could manage your Windows Servers in a better way? Agentlessly discovery, assess and remediation security vulnerabilities. Control your maintenance windows by choosing when to assess, stage updates, execute, and reboot systems. Manage physical and virtual servers, on premises or in the cloud. Contain virtual sprawl in your VMware environments with the ability to scan and automate patching for offline VMs and templates. Integrate into any orchestrator or automation solution using our REST or Powershell APIs to full script and automate patching of complex workloads. Did we mention this can all be done Agentlessly? Join our webinar to learn how.

Testing or Hacking: Real Advice on Effective Security Testing StratagiesDaniel Billing

��

3. Mini seminar 2 - MylynLeonid Maslov

��

Abstract Tools for Effective Threat Huntingchrissanders88

��

Are We Secure? Answering the UnanswerableJustin Berman

��

New text documentsleucwnq

��

The document provides a list of interview questions for information security positions. The questions cover a range of technical and theoretical topics related to information security. They are designed to assess candidates' knowledge as well as their ability to think through problems and articulate their thought processes, even without preparation. The questions range from easy to difficult, and include some "trick" questions intended to expose technical weaknesses rather than test cunning.

New text documentsleucwnq

��

The document provides a list of interview questions for information security positions. The questions cover a wide range of technical and theoretical topics, and are designed to assess candidates' knowledge as well as their ability to think through problems. The questions probe areas like security news sources, encryption vs compression, HTTP vs HTML, cross-site scripting, cryptography, networking, and organizational priorities. The goal is to evaluate candidates' familiarity with the field as well as their composure when facing unfamiliar questions.

How to Use Artificial Intelligence to Minimize your Cybersecurity Attack SurfaceSparkCognition

��

This document discusses how artificial intelligence can help address challenges in cybersecurity. It notes that the growing number of new threats and internet-connected devices has exceeded the capacity of human analysts. It then describes three key problems that are ripe for AI solutions: malware detection, as polymorphic malware evades traditional antivirus tools; threat intelligence, as too many security alerts overwhelm analysts; and automated threat research, to accelerate response times. The presentation then demonstrates DeepArmor, a cognitive security solution from SparkCognition that uses machine learning for more effective malware detection and natural language processing to summarize threat information and research for analysts.

Hacking 10 2010Felipe Prado

��

This document provides information about the editorial staff and contributors involved in the Hakin9 IT security magazine. It lists the Editor in Chief, Editorial Advisory Board members, designers, proofreaders, beta testers, consultants, publishers, and production staff. It also contains a brief disclaimer about the techniques discussed in the magazine and a greeting from the Editor in Chief introducing the topics covered in the current issue, including spyware threats and protections.

451 and Cylance - The Roadmap To Better Endpoint SecurityAdrian Sanabria

��

In recent years, endpoint security has evolved well beyond signature-based antivirus which proved unable to keep pace with the speed and volume of evolving threats. With the onslaught of new security technologies available, it can be difficult to determine where to begin. In this webinar, 451 Senior Analyst,��Adrian Sanabria��and Cylance Product Marketing Manager,��Steve Salinas��will discuss a proven approach to securing your endpoints. Adrian and Steve will present the fundamental steps to securing endpoints:�� • Step 1: A Better Malware Mousetrap • Step 2: More Resilient Endpoints • Step 3: Stopping Non-Malware Attacks • Step 4: Full System Visibility with Endpoint Detection and Response • Step 5: Dynamic Defense with User Behavior • Step 6: Data Visibility • Conclusion: Malware is Solved! What Now? Endpoint security can be complex. Join us for this webinar to learn how applying a reasoned, results-based approach can help you can take control of your endpoints and silence attackers.

Cybersecurity in 2016Ben Finke

��

Vulnerability Analyst interview Questions.pdfinfosec train

��

Prevent Getting Hacked by Using a Network Vulnerability ScannerGFI Software

��

This document discusses network security recommendations for small to medium businesses. It begins by acknowledging hackers' skills and describes how hacking has evolved over time. It then provides six suggestions for improving network security: 1) update all computers regularly, 2) don't rely solely on WSUS for updates, 3) patching alone is not enough, additional verification is needed, 4) unanticipated hardware/software pose risks, 5) embrace application automation, and 6) use a single integrated solution for management. It promotes GFI LanGuard as a solution that provides patch management, vulnerability assessment, asset inventory, auditing and compliance features to help secure a network.

Research Paper Sentence OutlineResearch Question��How e-commer.docxaudeleypearl

��

Research Paper Sentence Outline:: Research Question:��How e-commerce companies address privacy in its policies? Purpose: The purpose of this assignment is to prepare you for the dissertation process by creating a sentence outline for a research paper.�� Description: The topic of your sentence outline is your research paper topic.�� After completing this week's Learning Activities, develop a sentence outline.�� Deliverable: Prepare a Microsoft Word document that includes the following headings and one full sentence in each section: · Title Page · Abstract · Introduction · Literature review �� · Research Method �� · Results · Discussion · Conclusion John Fulcher CYB/110 Playbook / Runbook Part 2 – Social Network Security John W. Fulcher University of Phoenix Online CYB/110 Question 3 The scenario that happened involved the Win32/Virut malware that was notorious and wreaked havoc on one machine in the company (Microsoft). The malware was detected and stopped before it spread to any other computer on the network. It operates by modifying the software executables on the computers and spreads by targeting every software executable that opens and writes its code that introduces a backdoor that allows hackers to access the system from remote servers. The malware is introduced when an infected executable is run on the machine and once it has been installed along with the innocent-looking software, it copies itself to every other executable as soon as it is opened, meaning that it does not spread if no executable file is run. This, in turn, means that any software that is yet to be run is safe. Upon realizing the corruption, which was done when an online scan using ESET antivirus was conducted, every executable was closed down (ESET). This allowed for antivirus to effectively isolate any executable affected and list it. Indeed, the executables were listed and it turned out that 7 executables had been affected already, these were immediately quarantined. Some of the software affected were office word and operating system executables. To effectively deal with the threat, I restored the quarantined files so that I could cleanly uninstall the software. After the uninstallation, the online scan was run again, since it was not vulnerable to infection through the executable corruption. This time around, every identified threat was removed and an operating system disc used to repair the corrupted operating system files. Finally, the ESET antivirus was installed so that such threats can be prevented before happening to reduce the extent of the damage. The affected software was then reinstalled and the system scanned with the offline antivirus and scheduled to automatically scan every day (Koret and Bachaalany). Employees must be guided not to share the following information online: · Usernames · Office address · Their medical history and records · Their work experiences · The place they have lived in · Family member’s identity · Date of births · ...

Гірка правда про безпеку програмного забезпечення, Володимир СтиранSigma Software

��

This document discusses common problems with how application security is implemented. It argues that software developers often lack security knowledge and focus on functionality over security. Security teams also lack development experience and focus on compliance over practical security. As a result, security is treated as an afterthought through ineffective practices like sole reliance on penetration testing. The document recommends a proper Secure Development Lifecycle approach involving security training, secure coding practices, testing and ongoing improvements.

Sigma Open Tech Week: Bitter Truth About Software SecurityVlad Styran

��

Paul Henry’s 2011 Malware TrendsLumension

��

Join security and forensics expert, Paul Henry, to learn about the latest malware trends and more importantly, practical steps you can take to better protect your organization from evolving threats. Learn: • How social media and removable devices have become new, targeted paths into your network • Why traditional defenses are not effective in the unending arms race with financially motivated “bad guys” • How to ensure an effective depth-in-defense security strategy that includes application whitelisting

[cb22] Keynote: Underwhelmed: Making Sense of the Overwhelming Challenge of C...CODE BLUE

��

As the security industry has grown we've seen every aspect of our world become more complicated and more overwhelming. We're consistently promised solutions and technology to make our lives easier, to stop the attacker, to catch them quicker, to automate the pain away, but the reality falls flat. Frankly, it's underwhelming. Understanding where your program stands today, where you should spend time and resources, and how best to reduce risk to your organization are key aspects of any program. Join us to discuss and discover what some of the largest organizations in the world are doing to try to make sense of it all, and how they got there.

Security Hands-On - Splunklive! HoustonSplunk

��

This document provides instructions for a hands-on security analytics session using Splunk. The session will use Splunk to investigate a Zeus malware infection across network, endpoint, asset, and threat intelligence data sources. Participants will begin by searching for new threat intelligence, then investigate the infection to identify the complete adversary kill chain. They will access a shared Splunk instance and work through exercises discovering the attacker's kill chain, producing new threat intelligence, and performing incident investigation across the security stack.

More Related Content

What's hot (7)

Threats that Matter - Murray State University 2017chrissanders88

��

Jsm big-dataSean Taylor

��

Computer literacy - Lesson 2mmuller_edtech

��

Agentless Patch Management for the Data CenterIvanti

��

Testing or Hacking: Real Advice on Effective Security Testing StratagiesDaniel Billing

��

3. Mini seminar 2 - MylynLeonid Maslov

��

Abstract Tools for Effective Threat Huntingchrissanders88

��

Threats that Matter - Murray State University 2017chrissanders88

��

Jsm big-dataSean Taylor

��

Computer literacy - Lesson 2mmuller_edtech

��

Agentless Patch Management for the Data CenterIvanti

��

Testing or Hacking: Real Advice on Effective Security Testing StratagiesDaniel Billing

��

3. Mini seminar 2 - MylynLeonid Maslov

��

Abstract Tools for Effective Threat Huntingchrissanders88

��

Similar to HPBigData2015Predicting Cyber Security Industry-JohnPark (20)

Are We Secure? Answering the UnanswerableJustin Berman

��

New text documentsleucwnq

��

New text documentsleucwnq

��

How to Use Artificial Intelligence to Minimize your Cybersecurity Attack SurfaceSparkCognition

��

Hacking 10 2010Felipe Prado

��

451 and Cylance - The Roadmap To Better Endpoint SecurityAdrian Sanabria

��

Cybersecurity in 2016Ben Finke

��

Vulnerability Analyst interview Questions.pdfinfosec train

��

Prevent Getting Hacked by Using a Network Vulnerability ScannerGFI Software

��

Research Paper Sentence OutlineResearch Question��How e-commer.docxaudeleypearl

��

Гірка правда про безпеку програмного забезпечення, Володимир СтиранSigma Software

��

Sigma Open Tech Week: Bitter Truth About Software SecurityVlad Styran

��

Paul Henry’s 2011 Malware TrendsLumension

��

[cb22] Keynote: Underwhelmed: Making Sense of the Overwhelming Challenge of C...CODE BLUE

��

Security Hands-On - Splunklive! HoustonSplunk

��

Cybersecurity - Sam MaccherolaTechBiz Forense Digital

��

This document discusses the need for cyber forensics capabilities to effectively respond to modern cybersecurity threats and incidents. It notes that traditional perimeter-based defenses are no longer sufficient, and that comprehensive endpoint visibility is needed to identify covert threats, attribute attacks, and limit data breaches. The document promotes the Guidance Software EnCase Cybersecurity solution as providing critical network-enabled incident response and forensic investigation capabilities for enterprises.

Five Reasons to Look Beyond Math-based Next-Gen AntivirusSarah Vanier

��

The document discusses 5 reasons why "math-based" next-generation antivirus products that rely solely on prevention and predictive analysis are insufficient for comprehensive endpoint protection. First, they only address 50-60% of malware and cannot prevent non-file based attacks. Second, malware behavior is difficult to truly predict. Third, with millions of new variants weekly, a 99.9% detection rate is not adequate. Fourth, these products require significant time and resources to train their AI models. Fifth, their management is strictly cloud-based without an on-premise option. A better approach combines prevention, detection, and automated response across all attack vectors on the endpoint.

Open Source Insight: CVE-2017-2636 Vuln of the Week & UK National Cyber Secur...Black Duck by Synopsys

��

McAfee Labs 2017 Threats PredictionsMatthew Rosenquist

��

McAfee Labs explores top threats expected in the coming year. Welcome to the McAfee Labs 2017 Threats Predictions report. We have split this year’s report into two sections. The first section digs into three very important topics, looking at each through a long lens. The second section makes specific predictions about threats activity in 2017. Our predictions for next year cover a wide range of threats, including ransomware, vulnerabilities of all kinds, the use of threat intelligence to improve defenses, and attacks on mobile devices.

L1 �ݺ�ߣs – Online Safety – KS4.pptxITRIS1

��

This document provides an introduction to online safety for students. It discusses key concepts like data theft, censorship, and the dark web. Students reflect on which online threats are common and which they can protect themselves from. They identify safety risks of different internet activities and precautions to take. The lesson objectives are to discuss main online safety concerns and reflect on online activity from a safety perspective. Students are assigned homework to log any online safety threats they encounter.

Are We Secure? Answering the UnanswerableJustin Berman

��

New text documentsleucwnq

��

New text documentsleucwnq

��

How to Use Artificial Intelligence to Minimize your Cybersecurity Attack SurfaceSparkCognition

��

Hacking 10 2010Felipe Prado

��

451 and Cylance - The Roadmap To Better Endpoint SecurityAdrian Sanabria

��

Cybersecurity in 2016Ben Finke

��

Vulnerability Analyst interview Questions.pdfinfosec train

��

Prevent Getting Hacked by Using a Network Vulnerability ScannerGFI Software

��

Research Paper Sentence OutlineResearch Question��How e-commer.docxaudeleypearl

��

Гірка правда про безпеку програмного забезпечення, Володимир СтиранSigma Software

��

Sigma Open Tech Week: Bitter Truth About Software SecurityVlad Styran

��

Paul Henry’s 2011 Malware TrendsLumension

��

[cb22] Keynote: Underwhelmed: Making Sense of the Overwhelming Challenge of C...CODE BLUE

��

Security Hands-On - Splunklive! HoustonSplunk

��

Cybersecurity - Sam MaccherolaTechBiz Forense Digital

��

Five Reasons to Look Beyond Math-based Next-Gen AntivirusSarah Vanier

��

Open Source Insight: CVE-2017-2636 Vuln of the Week & UK National Cyber Secur...Black Duck by Synopsys

��

McAfee Labs 2017 Threats PredictionsMatthew Rosenquist

��

L1 �ݺ�ߣs – Online Safety – KS4.pptxITRIS1

��

HPBigData2015Predicting Cyber Security Industry-JohnPark

1. SEIZE THE DATA. 2015 PredictingCyberSecurityIndustry HP Security Briefing 21 John Park/ August 11th, 2015

2. It all starts with a simple question.

3. “What is happening with computer security ?”

4. First solution: “READ EVERYTHING.”

6. After 5000 hours of reading…

8. Lesson #1: There is more info than one can read in a lifetime.

9. Lesson #2: The more one reads, the more it sounds the same.

10. Second solution: “USE MACHINES.”

11. Natural Language Processing (NLP)

12. Word-smithing

13. Mass Media 101: Journalism The more important it is, the more it’s talked about.

14. Mass Media 102: Advertising The more it’s talked about, the more important it becomes.

15. Mid-way: questions?

16. Game Plan: Count the number of words and sequences of words (n-grams).

17. Data tip #1: Start with a high-quality dataset.

19. HPSR Cyber Risk Report 2015

20. NLP tip #1: Word (1-gram) frequency shows the ingredients.

21. NLP tip #2: Word pair (2-grams) are intersections. More niche.

22. NLP tip #3: 3+ grams are super-niche. May be too unique.

23. NLP tip #4: Stemming lowercase + substr(word,0,7)

24. NLP tip #5: Stop-words (is, the, ...) Normalize against general text. (go over the top 300 manually)

25. NLP tip #6: If timeline analysis, balance the “before” and the “after”.

26. NLP tip #7: It’s always best to have final human verification. Use the common sense. Find similar exploiters.

27. Without further ado, let’s see some results.

28. Result #1: Top 5 words (2013+2014) 1. Malware 2. Security 3. Attack 4. System 5. Exploits

29. Power Law/Long-Tail

30. Result #2: Top 5 n-grams (2013+2014) 1. Operating System 2. Targeted Attack 3. Exploit Kits 4. United States 5. Social Engineering

31. Result #3: Security conferences Black Hat 1. attack 2. security 3. presentation 4. system 5. talk Def Con 1. security 2. talk 3. attack 4. network 5. hackers Virus Bulletin 1. malware 2. system 3. security 4. app 5. detection

32. Result #4: National mentions 1. United States 2. Russia 3. China 4. Germany 5. Brazil

33. One more thing…

34. What we really want: Predictions

35. Prediction #1: Word frequency 2015 (extrapolated from 2013 + 2014) 1. Security (2) 2. Attacks (3) 3. Malware (1) 4. System (4) 5. Data (6)

36. Prediction #1: n-gram frequency 2015 (extrapolated from 2013 + 2014) 1. Operating System (1) 2. Malware Family (9) 3. Exploit Kits (3) 4. Targeted Attacks (2) 5. Cyber Security (19)

37. And another thing…

38. What we really want: Competitive Analysis

39. What are other companies in the industry working on? Microsoft 1. computers 2. detected 3. exploits 4. Microsoft 5. malware FireEye 1. attack 2. malware 3. targeted 4. FireEye 5. verticals Verizon 1. data 2. incidents 3. breaches 4. attacks 5. organizations

40. More data on HP Security Briefing 21:

41. Security is about defending the System against Attacks, that start with Exploits and controlled by Malware.

42. SEIZE THE DATA. 2015

�ݺ�ߣ

HPBigData2015Predicting Cyber Security Industry-JohnPark

Recommended

More Related Content

What's hot (7)

Similar to HPBigData2015Predicting Cyber Security Industry-JohnPark (20)

HPBigData2015Predicting Cyber Security Industry-JohnPark