tl;dr we have a synthetic dataset not correlated to actual attacks and we stand behind misleading people #DBIRhttp://blog.kennasecurity.com/2016/05/collaborative-data-science-inside-the-2016-verizon-dbir-vulnerability-section/ …
-
This dataset and their analysis is misleading and harmful. Enterprises that follow that advice are worse off after reading it.
There's a total disconnect between real incident data and Kenna's synthetic dataset, here's another take on it:https://twitter.com/thegrugq/status/727002988250730496 …
-
-
Microsoft is combining crash data with on-host agent data here. They can track process execution. This data is REAL:https://twitter.com/thegrugq/status/727002988250730496 …
-
It still confuses me why Verizon didn't use their own incident data for tracking successful exploitation. It's concrete and reliable.
- 4 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.