Assessing Risk in Cybersecurity: How Sound Data Science Can Raise the Bar

Abstract

Cybersecurity is not currently a data science-driven practice, and the frustratingly slow progress in the development of cybersecurity technology reflects this deficiency. Operators are bombarded with too many false positives. If greater data science savvy is brought to bear at the system design stage, rather than not at all or after the fact, these challenges can be overcome. a more scientific understanding of the situation can lead to more effective results-based, rather than threat-based, solutions.