How Good is Your Data? Investigating the Quality of Data Generated During Security Incident Response Investigations

Simple item page
dc.contributor.authorGrispos, George
dc.contributor.authorGlisson, William
dc.contributor.authorStorer, Tim
dc.date.accessioned2019-01-03T00:57:25Z
dc.date.available2019-01-03T00:57:25Z
dc.date.issued2019-01-08
dc.description.abstractAn increasing number of cybersecurity incidents prompts organizations to explore alternative security solutions, such as threat intelligence programs. For such programs to succeed, data needs to be collected, validated, and recorded in relevant datastores. One potential source supplying these datastores is an organization’s security incident response team. However, researchers have argued that these teams focus more on eradication and recovery and less on providing feedback to enhance organizational security. This prompts the idea that data collected during security incident investigations may be of insufficient quality for threat intelligence analysis. While previous discussions focus on data quality issues from threat intelligence sharing perspectives, minimal research examines the data generated during incident response investigations. This paper presents the results of a case study identifying data quality challenges in a Fortune 500 organization’s incident response team. Furthermore, the paper provides the foundation for future research regarding data quality concerns in security incident response.
dc.format.extent10 pages
dc.identifier.doi10.24251/HICSS.2019.859
dc.identifier.isbn978-0-9981331-2-6
dc.identifier.urihttp://hdl.handle.net/10125/60152
dc.language.isoeng
dc.relation.ispartofProceedings of the 52nd Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectCyber Threat Intelligence and Analytics
dc.subjectSoftware Technology
dc.subjectCase Study
dc.subjectData Quality
dc.subjectIncident Learning
dc.subjectSecurity Incident Response
dc.subjectThreat Intelligence
dc.titleHow Good is Your Data? Investigating the Quality of Data Generated During Security Incident Response Investigations
dc.typeConference Paper
dc.type.dcmiText

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
0712.pdf
Size:
412.11 KB
Format:
Adobe Portable Document Format
Download

Collections

Cyber Threat Intelligence and Analytics