Visualizing Security
summary
Animated packet captures from AWS reveal a slow, massive scan that originates from Vietnam and runs for roughly 40 hours across TCP and UDP, created by exporting five-minute frames and stitching them with ffmpeg; vulnerability survival analysis across 300 environments shows 25% remediated in four weeks and 50% by ~100 days and argues for log scales; a Kenna-backed waffle chart reduces 108k CVEs to ~37k seen in environments and ~5k with known exploits; visuals and R code emphasize position over color for accurate quantitative decoding.
AI-written summary · about
chapters (12)
- 0:00Introduction to talk
- 1:26Network packet animation discovery
- 7:11Survival analysis of vulnerabilities
- 9:21Quantitative vs categorical data
- 13:13Heat maps and worm charts
- 16:05Waffle chart funnel analysis
- 17:27Exploring data distributions
- 19:10Visual cues and encoding
- 27:00Scales and coordinate systems
- 30:54Log scales in security data
- 31:16Key takeaways and recommendations
- 32:44Q&A session
related talks
57mSeeing the Vulnerable Forest Through the Exploited Trees
58mNothing to Risk but Risk Itself: Expanding Vulnerability Risk with Internet-Scale Data
20mEvolving from patch management to risk mitigation
56mOutpacing Attackers: How Data-Driven Insights Speed Up Vulnerability Remediation
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
54mTowards Real World Cyber Risk (Panel)
58mWhy Can't We All Just Get Along? Bridging the Gap in Vulnerability Prioritization Standards
33mFrom Boardrooms to Polling Places: Securing Critical Infrastructure in 2024