Using Science to Combat Data Loss Analyzing Breaches by Type….pdfVIP

I/S: A JOURNAL OF LAW AND POLICY FOR THE INFORMATION SOCIETY Using Science to Combat Data Loss: Analyzing Breaches by Type and Industry C. MATTHEW CURTIN, CISSP* LEE T. AYRES, CISSP** † Abstract: A firm understanding of the rates at which types of breaches occur, proportionate to one another, helps with the distribution of limited security budgets, by helping guide * C. Matthew Curtin is the founder of Interhack Corporation, a professional services firm with practice areas in Information Assurance and Forensic Computing. As a forensic computer expert, Mr. Curtin analyzes information technology and electronically stored information to answer questions that arise in adjudication. He has appeared as an expert witness in both civil and criminal cases, dealing with everything from electronic discovery to assessment of information technology in practice. Since 1998, Mr. Curtin has maintained a regular academic appointment as a lecturer at The Ohio State Universitys Department of Computer Science and Engineering, teaching courses in the Common Lisp programming language and operating systems. He frequently lectures on the topic of forensic computing to audiences of judges and attorneys. ** Lee Ayres joined Interhack as a Senior Analyst in January 2007, supporting both the Forensic Computing and Information Assurance practices. Using his experience as an application developer and systems analyst, he helps attorneys in litigation understand how to make use of the systems and data available to them as evidence. For three years prior to joining Interhack, Lee was the lead developer at Mercury Markets in Chicago, building automated trading systems for the global financial markets using proprietary algorithms. His previous experience includes work as a developer and system engineer at I-DEP, building systems for taking depositions