Transcription of Data Science Tutorial - Carnegie Mellon University
1 12017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited1 Software Engineering InstituteCarnegie Mellon UniversityPittsburgh, PA 152132017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is UnlimitedData Science TutorialEliezer Kanal Technical Manager, CERTD aniel DeCapria Data Scientist, ETC2 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited2 About usEliezer KanalTechnical Manager, CERTR ecent projects: ML-based Malware Classifier Network traffic analysis Cybersecurity questionnaireoptimizationDaniel DeCapriaData Scientist, ETCR ecent projects: Cyber risk situationaldashboard Big Learning benchmarks3 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release.
2 Distribution is Unlimited3 Today s presentation a tale of two rolesThe call center managerIntroduction todata Science capabilitiesThe master carpenterOverview of thedata Science toolkit4 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited4 Call center managerFirst day on !Goal:Reduce costsTask:Keep calls short!Data:Average call minutes (5:08)..very long!Number of employees:300 Average calls per day:~28,0005 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited5 Call center manager Gather dataGet the data!
3 Where is it? What will you use to analyze it? How accurate it is? How complete is it? Is it too big to easily read?6 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited6 Data cleaning = 90% of the work2 weeks (10 days) = 9 cleaning, 1 analyzing7 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited7 More structureLess structureCleaning the Data Structuring the DataGoal: Organize data in a table, = descriptor (age, weight, height)Row = individual, complete recordsHow can you get data out of these documents?
4 8 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited8 Cleaning the DataEven when you think your data should be clean, it might not Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited9 Cleaning the Data Call Center ExampleNameMgrDirCall LengthPhone LineProblem solved?CommentBeth JonesDan ThomasAnne Kim1 ThomasAnne Kim1 , BethDan ThomasAnne KeaneMark RyanTim KeaneMark RyanTim WoodTim WoodTim WoodTim Nominal Unstructured 10 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited10 Call Center manager Exploring data11 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release.
5 Distribution is Unlimited11 Exploratory Data Analysis (EDA) Mean Median Standard deviation Histograms!12 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited12 Distributions The majority of data will follow SOME distributionoWeight of all Americans:Gaussianophone call length:Exponential Determining distribution is a common Data Science task Multidimensional outliers: Insider Threat exampleImage Copyright 2001-2016 The Apache Software Foundation.
6 See Copyright slide for more Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited13 EDA Smart visualizations14 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited1415 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited1516 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited1617 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release.
7 Distribution is Unlimited17 Brief interruptionSkeptics in the audience18 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited18 Brief interruptionData Science helps you use data to get results. This is Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited19 Call center manager call duration histogramAverage (5:08)20 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited20 Call Center manager Insights!
8 Strategy update: Goodbye reduce call time Hello reduce callbacks How to measure? callbacks isn t currently captured21 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited21 Feature EngineeringNeed more useful data?Create it yourself!22 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited22 Feature Engineering Feature Engineering: coming up with new, useful ( ,informative) dataomean, sums, medians, , xy , sqrt (xy), etc.
9 Our case:o# of callbacksoCall during peak time?oOverall agent performance? (combination of factors)23 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited23 The role of Listening in Data ScienceData Science finds hidden patterns in dataExperts know what data & patterns are importantTalk to subject matter experts24 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release.
10 Distribution is Unlimited24 Call Center manager Predictive analyticsCan we predict staffing ..one day ahead? ..one week ahead? ..one month ahead?Can we determine what types of calls to ..for a product we haven t had before? ..for a market we ve never seen before?25 Data Science TutorialAugust 10, 2017 2017 Carnegie Mellon University2017 SEI Data Science in Cybersecurity SymposiumApproved for Public Release; Distribution is Unlimited25 Example Predictive Analytics QuestionsPredicting Current UnknownsOnline: Which ads are malicious?Security: Is the bank transaction fraudulent?