How Good is Your Data? Investigating the Quality of Data Generated During Security Incident Response Investigations

Simple item page
dc.contributor.authorGrispos, George
dc.contributor.authorGlisson, William Bradley
dc.contributor.authorStorer, Tim
dc.date.accessioned2021-09-23T21:43:37Z
dc.date.available2021-09-23T21:43:37Z
dc.date.issued2019-01
dc.descriptionA paper co-authored by William Glisson that was published in the Proceedings of the 52nd Hawaii International Conference on System Sciences in 2019.en_US
dc.description.abstractAn increasing number of cybersecurity incidents prompts organizations to explore alternative security solutions, such as threat intelligence programs. For such programs to succeed, data needs to be collected, validated, and recorded in relevant datastores. One potential source supplying these datastores is an organization’s security incident response team. However, researchers have argued that these teams focus more on eradication and recovery and less on providing feedback to enhance organizational security. This prompts the idea that data collected during security incident investigations may be of insufficient quality for threat intelligence analysis. While previous discussions focus on data quality issues from threat intelligence sharing perspectives, minimal research examines the data generated during incident response investigations. This paper presents the results of a case study identifying data quality challenges in a Fortune 500 organization’s incident response team. Furthermore, the paper provides the foundation for future research regarding data quality concerns in security incident response.en_US
dc.identifier.citationGrispos, G., Glisson, W., & Storer, T. (2019). How Good is Your Data? Investigating the Quality of Data Generated During Security Incident Response Investigations. Proceedings of the 52nd Hawaii International Conference on System Sciences. Hawaii International Conference on System Sciences, p. 7156-7165. https://doi.org/10.24251/hicss.2019.859en_US
dc.identifier.urihttps://hdl.handle.net/20.500.11875/3204
dc.publisherProceedings of the 52nd Hawaii International Conference on System Sciencesen_US
dc.subjectCyber Threat Intelligence and Analyticsen_US
dc.subjectSoftware Technologyen_US
dc.subjectCase Studyen_US
dc.subjectData Qualityen_US
dc.subjectIncident Learningen_US
dc.subjectSecurity Incident Responseen_US
dc.subjectThreat Intelligenceen_US
dc.titleHow Good is Your Data? Investigating the Quality of Data Generated During Security Incident Response Investigationsen_US
dc.typeArticleen_US

Files

Original bundle

Now showing 1 - 1 of 1
Thumbnail Image
Name:
How Good is your data_OCR.pdf
Size:
496.71 KB
Format:
Adobe Portable Document Format
Description:
Article
Download

License bundle

Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.63 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

Department of Computer Science
Cyber Forensics Intelligence Center