By Bob Rudis (@hrbrmstr)
Thu 30 October 2014 | tags: datavis, d3, security, -- (permalink)

Are you:

• A security vendor feeling inadequate because you don’t have your own “live attack graph”?
• A SOC manager who needs to distract/impress visitors and/or executives with an “ooh, shiny!” display?
• A researcher who wants to draw attention to your project but just don’t have the ...

By Bob Rudis (@hrbrmstr)
Tue 21 January 2014 | tags: maps, d3, map, cartography, -- (permalink)

(This series of posts expands on a topic presented in Chapter 5 of Data Driven Security : The Book)

Cartographers (map makers) and infosec professionals both have the unenviable task of figuring out the best way to communite complexity to a diverse audience. Maps hold an unwarranted place of privilege in ...

By Jay Jacobs (@jayjacobs)
Thu 09 January 2014 | tags: d3, vcdb, -- (permalink)

I work a lot with breach data and one of the things that is slowly emerging from the data is that there is no single approach that would work for every organization. In order to begin to peel away at this problem (and to work on my D3 skills), I am tapping into the VCDB data set. For those not familiar with VCDB (VERIS Community Database), it is a project started at Verizon early in 2013 (and part of my rather fun day job). VCDB scours headlines for information about security incidents and records them in the VERIS format.…