Brandi Keough

Brandi Keough

Applying the Scientific Method to Cybersecurity Event Analysis
Information Security Analyst, Novant Health

Abstract: What is one of the biggest frustrations when analyzing a cybersecurity event? To me, it is a simple frustration of not knowing where to go next with my investigation. I find that it is easy to trail down what we like to call “rabbit holes”. These rabbit holes may not lead anywhere, which is fine. However, it is frustrating when you are deep in a rabbit hole and end up at a cross tunnel not knowing which way to go next or where you just came from.
By applying the scientific method to our analysis we are able to better organize our thought process, focus on where we should go next and where we have already been in the investigation that took us to a dead-end. The scientific method can be used for even the simplest adverse cybersecurity events, as well as complex cybersecurity incidents.
In this presentation, you will learn about the scientific method and how it relates to and can be used within cybersecurity event analysis. You will see examples of real world cybersecurity events and how the scientific method can be used to address these events.

Brandi Keough is a Charlotte North Carolina native who started her college career at UNC Charlotte as a Chemistry major and graduated from Utica College in 2016 with her Bachelors of Science in Cybersecurity and Information Assurance with a concentration in Forensics and Investigations. Brandi is currently an information security analyst with Novant Health’s Cybersecurity Incident Response Center (CIRC), supporting their clinical counterparts and patients by providing continuous monitoring and incident response of cybersecurity events.

To View 2018 Presentation, CLICK.