Cyber Threat Hunting (CTH) in an Age of Escalating Cyber Threats
Why Cyber Threat Hunting? As the digital world evolves and grows, so do the complexities and challenges of cybersecurity. Cyber...
Dr. Mark Russo
Dr. Russo is currently the Senior Data Scientist with Cybersenetinel AI in Washington, DC. He is a former Senior Information Security Engineer within the Department of Defense's (DOD) F-35 Joint Strike Fighter program. He has an extensive background in cybersecurity and is an expert in the Risk Management Framework (RMF) and DOD Instruction 8510, which implement RMF throughout the DOD and the federal government. He holds a Certified Information Systems Security Professional (CISSP) certification and a CISSP in information security architecture (ISSAP). He has a 2017 Chief Information Security Officer (CISO) certification from the National Defense University, Washington, DC. Dr. Russo retired from the US Army Reserves in 2012 as a Senior Intelligence Officer.
TOP 5: The Main Implications of ML to Help Deter Cyber-threats
SUSCEPTIBILITY OF DATA INTERNAL AND EXTERNAL TO THE DATA ANALYTIC EFFORT...INSIDE AND OUTSIDE "THE WIRE" Data poisoning, also known as...
How the DOD Can be Successful against the Major Cyber Threat Actors?
CYBERSECURITY REQUIRES A HOLISTIC APPROACH AT ALL LEVELS The Department of Defense (DoD) is critical in protecting the United States...
Clustering Algorithms Can Play a Pivotal Role in Identifying Cyber-threat Anomalies in Data
Garbage in/Garbage out...why do we need good data? Data quality and consistency are crucial for data scientists because they significantly...
SPOT: Security Technical Implementation Guides (STIGs): Why are They Neglected by System Developers?
MORE THAN JUST NIST SECURITY CONTROLS System hardening is the process of securing a computer system by reducing its attack...
Next Phase of Cybersecurity Protection: Cyberanalytics
Cyberanalytics is the logical progression for the application of Machine Learning to Cybersecurity Protective Measures As we continue to rely...
The Best Metrics to use in Protecting your Computer infrastructure and the Types of Threats Facing Businesses
DEFENDING AGAINST ONGOING CYBER-ASSAULTS As a company or business, it is essential to prioritize the protection of your computer infrastructure...
Why Clustering Algorithms are Best Suited to Identify and Protect against Cyberthreats
Clustering algorithms are a type of machine learning algorithm that can be used to identify patterns and relationships within a...
The Importance of Metrics in Cybersecurity
Metrics are a crucial aspect of cybersecurity, as they allow organizations to measure and track the effectiveness of their security...
CRITIQUE: The Problems with the Scientific-based Risk Metrics Methodology
Applying the Qualitative to Frame Quantitative Analysis Abstract A significant challenge facing businesses and agencies is how to focus limited...
A Quick Debate about Sample Size Determination
Is more data better or worse? Abstract One quantitative challenge facing experimenters in data science is how large a sample...
CO-ACT: An Ethics Model for Data Science Privacy
Balancing the Benefits of Data Science with Privacy The implications of data science have yet to solidify within the academic...
ETHICS: The Ongoing Failed Application of Utility in Cybersecurity
An Ethical Exploration ...A Faulty Application of Utilitarianism in Cybersecurity.... Utilitarianism is foundational to the Western business ethical decision-making process...
The TOP 6 Fallacies of Cyber-Threat Hunting
Focus on what will make it work #6 It is more TACTICAL than STRATEGIC. The current small community addressing why...
PRIMER: Describe & Define Current Research Study Methods
For those delving into a Phd Program I have had some questions from readers starting their own PhD adventure. The...
COMMENTARY: DOD’s Cybersecurity Maturity Model Certification II
A Prognostication for the Arm-chair Cyber Generals In 2019, the Department of Defense (DOD) announced the development of the Cybersecurity...
The Illusion of Cybersecurity Quantification
Where has measurability gone? Approximately “48% attempt to quantify the damage a cyberattack could have” on their business (Lis &...
External Data’s Role in Cyber-Defense
In the Background way too Long... Nagrecha and Chawla’s (2106) and Zuech et al.’s (2015) works are historical and seminal...
SYNOPSIS: The AI Winters and Summers
In the beginning. While it is presumed that the advent of data science and AI is a rather new phenomenon,...
Predictive Analytics meets Big Data
What's making the current Artificial Intelligence (AI) "Summer" Possible? Rodriguez and Da Cunha (2018) describe an interrelationship between the elements...
SPOT: Our difficulties in stopping cyber-bad-guys
A perspective on where the cybersecurity challenge started The world is run by ones and zeroes…There’s a war out there…It’s...
COMMENTARY: DOD’s “NEW” CMMC is unnecessary duplication
The ONLY change needed is the introduction of third-party assessors to resolve the one real flaw of RMF "The current...
Is there a need for a Cybersecurity-Data Science Conceptual Framework??
Discussion-Thought Piece on the Future of Data Science Solutions in the Cybersecurity Battle Frontlines The world is run by ones...
Why most SIEM Solutions are Failing us
Security Information Event Managers (SIEM) and like Data Science-based automated solutions continue to fail against a broad and complex array...
Data Science Study Challenges
The Problems in Both Qualitative and Quantitative Research The Real Data Science Challenges: Data Collection and Analysis Data collection in...
Honeypot Data to Improve Threat Detection
What are we still missing ? Background Ezeife, Dong, and Aggarwal (2008) describe the frustrations of intrusion detection of cyber-threats...
A Drive Toward Supply Chain Security Management (SCSM): the Next-Step to IT “Quality”
Quality is not just a matter of performance Supply chain quality management efforts now require supply chain security management focus...
Cybersecurity Research: A Future Requirement for Mixed Method
Quantitative and Qualitative Research Designs can no longer stand on their own Abstract The author conducts a literature review on...
What qualifies as a “successful” Cyber Threat Hunt?
Characteristics of a Successful Hunt Mission To ensure that the hunt team’s analysts remain focused on relevant and important hunts,...
Cybersecurity Deception: A Matter of an Active-Defense
What do we do when our failed efforts have been focused on prevention? DEFINITION: CYBER-DECEPTION: Deliberate actions to obfuscate the...
