SMU Data Science Review
Abstract
In this paper, we disambiguate risky activity corporate users are propagating with their software in real time by creating an enterprise security visualization solution for system administrators. The current problem in this domain is the lag in cyber intelligence that inhibits preventative security measure execution. This is partially due to the overemphasis of network activity, which is a nonfinite dataset and is difficult to comprehensively ingest with analytics. We address these concerns by elaborating on the beta of a software called "Insight" created by Felix Security. The overall solution leverages endpoint data along with preexisting whitelist/blacklist designations to unambiguously communicate potential Indicators of Compromise (IOC) on an executive level by employing visualizations.
Recommended Citation
Quazi, Sunna; Baca, Adam; and Darsche, Sam
(2018)
"Project Insight: A Granular Approach to Enterprise Cybersecurity,"
SMU Data Science Review: Vol. 1:
No.
4, Article 5.
Available at:
https://scholar.smu.edu/datasciencereview/vol1/iss4/5
