NDSS 2022 Keynote - Measuring Security Outcomes

Описание: PLENARY SESSION 02 Monday Keynote: Measuring Security Outcomes

Security is measurable. Or rather, security outcomes (broadly defined) are measurable. In the most basic form the measure of insecurity is the sum total of harm experienced. Success of security efforts can be measured based on the rate of decrease of this harm. If harm is decreasing, then we are succeeding. If harm is increasing, then we are failing. While such measurement of outcomes is essential for post-hoc assessment of overall progress, it does not directly help In guiding new decisions. For that we need predictive heuristics.

In order for these predictive metrics to be valid their correlation with actual outcomes must be continuously empirically validated. Unfortunately, most of the predictive security metrics in use today, plausible as they seem, have never been empirically correlated with harm reduction. Thus, establishing reliable measurement of security outcomes is essential for developing better predictive metrics and driving the evolutionary progress of our field. Our domain is not unique in this challenge and we can learn a lot from how other fields have approached it.

Keynote Speaker: Alex Gantman, Qualcomm Technologies Inc.

Alex Gantman is a security engineering executive with over 20 years of experience leading global organizations to deliver secure and reliable products at scale.

Currently serving as Vice President of Engineering at Qualcomm Technologies Inc., Alex has led the establishment and evolution of a broad-scale product security practice covering thousands of products, tens of millions of lines of code, and tens of thousands of engineers across the globe.

Alex received Bachelor’s (1998) and Master’s (2001) degrees in Computer Science from the University of California, San Diego. He holds over 45 patents and is a recognized subject matter expert in hardware, software, and systems security across a wide range of domains, including mobile, automotive, IoT, healthcare, and payments.


Network and Distributed System Security (NDSS) Symposium 2022, 24 – 28 April, 2022 Catamaran Resort Hotel & Spa, San Diego, California, and online.

ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.
https://www.ndss-symposium.org/

#NDSS #NDSS22 #NDSS2022 #InternetSecurity