Overview
Explore how big data is revolutionizing incident response in cybersecurity through this 44-minute conference talk from HouSecCon 6 (2015). Delve into the evolution from traditional methods to big data infrastructure, understanding the impact on security practices. Learn about data analysis techniques, the advantages of big data over relational databases, and concepts like forward pivot and black hole in cybersecurity. Examine real-world examples, including exploit kits and the infamous Sharknado scenario. Gain insights into effective information collection, identifying critical events, and determining the scope of incidents. Discover how big data enhances the ability to target and respond to security threats in this comprehensive overview of modern incident response strategies.
Syllabus
Introduction
Big Data Infrastructure and Response
The Old Way
Big Data
Data Analysis
Big Data vs Security
The Big Picture
Why Big Data
Relational vs Big Data
Forward Pivot
Black Hole
Exploit Kits
Example
Scoping
Sharknado
Recap
Collecting Information
Critical Events
Target