Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center
summary
A system that collects public feeds and social posts, weights signals and emits real‑time prioritized alerts is already built and running; it uses AWS Lambda sensors feeding a database and a weight‑based analytics engine. The measurable claim: 2.5 years of data reduced thousands of CVSS 9–10 alerts to a handful of daily high/critical items via a computed Vulnerability Intelligence Quotient, and the system surfaces known large events like Spectre/Meltdown and BlueKeep.
AI-written summary · about
chapters (24)
- 0:00Intro
- 0:20Welcome
- 1:40Outline
- 3:15Number of Unique Vulnerability
- 4:55How to triage vulnerabilities
- 5:40How tsunamis occur
- 6:47Deep Ocean Assessment Reporting System
- 8:54Surface Buoys
- 10:47Data Collection
- 15:10Technology
- 16:40Design
- 19:06Data Analysis
- 21:42Vulnerability Analysis
- 22:29Vulnerability Intelligence Quotient
- 26:15Intelligence Quotient
- 26:47CVSS
- 28:41One Year Data
- 32:57Prioritization
- 33:35Critical
- 36:28Comparison
- 37:03Data
- 37:25NSA Curveball
- 40:40Top 10 vulnerabilities
- 41:18Future work
related talks
47mReal Time Vulnerability Alerting
25mAutomating Cyber Threat Intelligence: A Practical Approach to Managing Emerging Vulnerabilities
33mFrom Chaos to Calm: Vulnerability Management for a Dynamic, Sprawling Technology Estate
41mBuilding a Valid Threat Library for Cloud Based Applications
58mNothing to Risk but Risk Itself: Expanding Vulnerability Risk with Internet-Scale Data
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
40mVisualizing Security
20mWhy I’m Optimistic (And You Should Be, Too)