Collaborate Disseminate
Permalink
The post Circle City Con 5.0 2018, Tony Martin-Vegue’s ‘How to Lie with Statistics, Information Security Edition’ appeared first on Security Boulevard.
Continue reading Circle City Con 5.0 2018, Tony Martin-Vegue’s ‘How to Lie with Statistics, Information Security Edition’
I’m posting this here as some of you may be intrigued by puzzle.
On the other hand I’ll delete this question in the near future as it may not be best suited for stackexchange.
original post with hints
https://twitter.com/Pr… Continue reading Stegano puzzle using image entropy (crypto bounty included)
I just saw that my router has transferred over 500GB in the past 2 days, which doesn’t make sense to me (in a home with 4 people). I want to make a breakdown of how much bandwidth each connected client is using.
It’s an old … Continue reading Find out how much bandwidth each client of a wireless router is using [migrated]
Here’s a really interesting writeup by [Mike] that has two parts. He shows that not only is it possible to load wooden dice by placing them in a dish of water, but that when using these dice to get an unfair advantage in Settlers of Catan, observation of dice rolls within the game is insufficient to prove that the cheating is taking place.
[Mike] first proves that his pair of loaded dice do indeed result in a higher chance of totals above seven being rolled. He then shows how this knowledge can be exploited by a Settlers of Catan …read more
Continue reading How Provably Loaded Dice Lead to Unprovable Cheating
Previously, we discussed how to apply the most basic hypothesis test: the z-test. It requires a relatively large sample size, and might be appreciated less by hackers searching for truth on a tight budget of time and money.
As an alternative, we briefly mentioned the t-test. The basic procedure still applies: form hypotheses, sample data, check your assumptions, and perform the test. This time though, we’ll run the test with real data from IoT sensors, and programmatically rather than by hand.
The most important difference between the z-test and the t-test is that the t-test uses a different probability distribution. …read more
Continue reading Statistics and Hacking: A Stout Little Distribution
In the early 20th century, Guinness breweries in Dublin had a policy of hiring the best graduates from Oxford and Cambridge to improve their industrial processes. At the time, it was considered a trade secret that they were using statistical methods to improve their process and product.
One problem they were having was that the z-test (a commonly used test at the time) required large sample sizes, and sufficient data was often unavailable. By studying the properties of small sample sizes, William Sealy Gosset developed a statistical test that required fewer samples to produce a reasonable result. As the …read more
Continue reading Statistics and Hacking: An Introduction to Hypothesis Testing
In the early 20th century, Guinness breweries in Dublin had a policy of hiring the best graduates from Oxford and Cambridge to improve their industrial processes. At the time, it was considered a trade secret that they were using statistical methods to improve their process and product.
One problem they were having was that the z-test (a commonly used test at the time) required large sample sizes, and sufficient data was often unavailable. By studying the properties of small sample sizes, William Sealy Gosset developed a statistical test that required fewer samples to produce a reasonable result. As the …read more
Continue reading Statistics and Hacking: An Introduction to Hypothesis Testing
Strange question: is it statistically more likely for a major security vulnerability to be found in a piece of software given one has already discovered a vulnerability, or is the probability of the presence of a major vulner… Continue reading Statistical probability of serious vulnerabilities given prior vulnerabilities
There have been a few “firsts” in AI-versus-human gaming lately, and the computers are now beating us at trivia, chess and Go. But in some sense, none of these are really interesting; they’re all games of fact. Poker is different. Aside from computing the odds of holding the winning hand, where a computer would obviously have an advantage, the key to winning in poker is bluffing, and figuring out when your opponent is bluffing. Until recently, this has helped man beat the machine. Those days are over.
Chess and Go are what a game theorist would call games of perfect …read more
I am currently looking for a statistic about security vulnerabilities classified by types. So how often in the last year vulnerabilities like stack based overflows, heap based overflows (like use-after-free, double-free) or I… Continue reading Statistic about security vulnerabilities classified by types [on hold]
