Cybersecurity metrics for better decision-making: a Canadian perspective

Presenters will include :

Gwen Beauchemin

Public Safety Canada

Data from the Canadian Cyber Incident Response Centre

Peter Cassidy

Anti-Phishing Working Group (APWG)

Global cybercrime event data exchange

José Fernandez

Polytechnique Montréal

Towards a science of Digital Public Health: A clinical study of risk factors leading to malware infections

Craig Forcese

Ottawa University

Does the State Belong in the Computers of the Nation? Legal Developments in Cybersurveillance

Salim Hasham

PricewaterhouseCoopers (PwC)

Global state of information security 2014

Walid Hejazi

Toronto University

2014 TELUS-Rotman security study

Suzanne Widup

Verizon

2014 Data Breach Investigations Report

Description

This two-day workshop will provide a comprehensive overview of current measurement efforts in cybersecurity. Their value (but also their limitations) will be discussed, with a particular emphasis on how statistics can empower cybersecurity practitioners and policy-makers. The workshop will provide many networking opportunities to engage both with presenters and other participants, and should be of interest to industry and government decision-makers and practitioners, as well as researchers.

A major cybersecurity challenge faced by governments, companies and civil society is accessing reliable data that would allow them to understand the nature and scope of relevant cybersecurity problems. This information is critical for effective decision-making.  Several companies, think tanks and academics have developed promising methodologies and published meaningful statistics to improve the situation in targeted areas (e.g., large corporations or SMEs; critical infrastructure, retail or banking sectors; cybercrime or information security; security or privacy). These studies often adopt a global perspective, yet Canadian initiatives are increasingly also providing local results.