By Mike Sconzo (@sooshie)
Tue 08 March 2016 | tags: blog, -- (permalink)

Straight from the Book of PEP

1. thou shalt have no other languages before me
2. thou shalt not compare me to R
3. thou shalt not take the name of python or scikit-learn in vain
4. keep holy the juypter notebook
5. honour thy pip and thy modules
6. thou shalt not ^C any running ...

By Bob Rudis (@hrbrmstr)
Sat 23 January 2016 | tags: blog, podcast, -- (permalink)

While I may not be able to attend the 2016 RSA Conference, I can provide some recommendations for those seeking a more data-driven schedule between parties and recovery breakfasts.

• There is a high likelihood that Advancing Information Risk Practices Seminar will have sage & practical advice on how to use data ...

By Bob Rudis (@hrbrmstr)
Mon 11 January 2016 | tags: blog, podcast, -- (permalink)

We’re starting off the new year with two new ways to listen to the Data-Driven Security Podcast!

First, we have our own Overcast station fully loaded with the previous two seasons of shows. You can listen to them online right on Overcast.fm or use their minimalist but highly ...

By Jay Jacobs (@jayjacobs)
Sat 07 November 2015 | tags: blog, statistics, -- (permalink)

There is a lot of misperception around sample sizes and the confusion happens on both sides of the research. A common question when researchers are starting out is, “How big should my sample size be?.” To help with that, there are handy calculators all over the Internet. But the more ...

By Bob Rudis (@hrbrmstr)
Wed 07 October 2015 | tags: blog, r, rstats, -- (permalink)

We have some strange data in cybersecurity. One of the (IMO) stranger data files is a Domain Name System (DNS) zone file. This file contains mappings between domain names and IP addresses (and other things) represented by “resource records”.

Here’s an example for the dummy/example domain example.com ...

By Bob Rudis (@hrbrmstr)
Sun 23 August 2015 | tags: blog, r, rstats, python, javascript, html, phantomjs, mhn, -- (permalink)

This was (initially) going to be a blog post announcing the new mhn R package (more on what that is in a bit) but somewhere along the way we ended up taking a left turn at Albuquerque (as we often do here at ddsec hq) and had an adventure in ...

By Bob Rudis (@hrbrmstr)
Sun 09 August 2015 | tags: blog, r, rstats, -- (permalink)

We just did a github release for an R package that provides an interface to the DomainTools API. It provides access to the core API functions that aren’t restricted (i.e. the ones we have access to):

• domaintools_api_key: Get or set DOMAINTOOLS_API_KEY value
• domaintools_username: Get or set DOMAINTOOLS_API_USERNAME value ...

By Bob Rudis (@hrbrmstr)
Fri 07 August 2015 | tags: blog, r, rstats, -- (permalink)

For those not involved with all things “cyber”, let me start with a description of what Shodan is (though visiting the site is probably the best introduction to what secrets it holds).

Shodan is—at it’s core—a search engine. Unlike Google, Shodan indexes what I’ll call “cyber ...

By Bob Rudis (@hrbrmstr)
Mon 27 July 2015 | tags: blog, r, rstats, -- (permalink)

UPDATE: RBerkeley is now on CRAN

If you made it to Chapter 8 of Data-Driven Security after ~October 2014 and tried to run the BerkeleyDB R example, you were greeted with:

Warning in install.packages :
  package ‘RBerkely’ is not available (for R version [YOUR_R_VERSION])

That’s due to the fact ...

By Bob Rudis (@hrbrmstr)
Wed 22 July 2015 | tags: blog, r, rstats, graph, bots, -- (permalink)

The R world has come a long way since Jay & I wrote Data-Driven Security. We had to make a conscious decision to stick with R 2.14.0 (R is at version 3.2.1 now) and packages such as knitr and dplyr either didn’t exist or were in ...