Swiss Army Knife

Education Level: Intermediate

5114 - Encore Presentation - The Top Vulnerabilities: Comparing Datasets

Speaker(s)

• 

  Joel Scambray

  Techincal Director
  NCC Group

New research into the most prevalent technical vulnerabilities identified in the prior year will be presented. Research methodology, key findings and implications for managing risk will be discussed. Data will be presented on most prevalent categories, risk levels, most-exploited technologies and the "top n"-specific vulnerabilities. Comparisons with external datasets including the OWASP Top 10 will be analyzed. Finally, lessons learned will be reported, covering data analysis strategies, value of "top n" lists and future research directions.

Learning Objectives:

• Prioritize the most important technical risks to an organization based on empirical data.
• Demonstrate how vulnerability statistical analysis can improve overall security program performance.
• Build a data analytics program to leverage your own vulnerability data.