Explore information security data visualization techniques and their impact on business decisions in this 48-minute conference talk from Circle City Con 2015. Delve into the world of big data landscapes, limited visibility challenges, and the evolution of security measures. Learn how to develop effective metrics, create impactful visualizations, and leverage internal data sources to enhance decision-making processes. Discover practical use cases, including patch prioritization and monitoring OWA access, while gaining insights into the value of metrics for business leadership. Master the art of extracting, transforming, and presenting security data to drive meaningful actions and improve overall organizational security posture.
Overview
Syllabus
Intro
All right boys and girls, Story Time!
Band of Breached
Big Data Landscape
We have Limited Visibility
Increased Visibility
Cost of Failure
Can you Answer One Simple Question?
Traditional Security Measures
But what if leadership refuses to believe?
The Threats
Baselines Provide a point of Reference
Who knows what evil lurks in the hearts of men?
After some initial analysis
So we talked with the business
Evolution of Plan B
So We Drew Some Pictures
What are the metrics?
Developing Metrics
So What? The value of metrics
This is what really matters to the business
The Basics
Some Example Metrics (Business)
InfoSec Data Visualization
Internal Data Sources
Example Data Sources
InfoSec Visualization Hardware
Extraction
Transform
Software
Use Cases
Patch Priority: Nessus in a new light
Who's accessing my OWA?
