Using Data-Driven Metrics to Anticipate and Prevent Security Incidents

Explore a conference talk that delves into GitHub's innovative approach to security incident prevention. Learn how the newly formed PSIRT Engineering team shifted focus from reactive firefighting to proactive incident anticipation. Discover the team's methodology for analyzing data-driven metrics, addressing product-specific vulnerabilities, and conducting variant analysis of past incidents. Gain insights into how this strategy successfully reduced pressure on the incident response team and prevented future security issues. Presented by Caitlin Buckshaw, a Product Security Engineer at GitHub with over a decade of IT/Security experience, this 36-minute talk from Strange Loop Conference 2023 offers valuable lessons for organizations looking to enhance their security posture through data-driven anticipation and prevention techniques.