1

DATAM IN R

Dillon Twombly | Clay Hendon

2

A G E N D A

• How has social media grown in popularity?

• What implications does social media have for security operations managers?

• How do security teams use social media to their advantage?

• What are some real life examples demonstrating how social media can be used effectively?

• What are some tips and best practices for social media use?

2

3

D ATA M I N R

Dataminr transforms real-time data from Twitter and other public sources into actionable alerts, identifying the most relevant information in real-time for clients in Finance, the Public Sector, News, Corporate Security, and Crisis Management.

3

D A T A M I N R O V E R V I E W

Dataminr’s current customers are the world’s leading information-reliant organizations in the Public Sector, Corporate Security, Energy, Finance, and Media.

Dataminr has a long-term strategic data and product partnership with Twitter.

4

G R O U N D W O R K• Born out of need

• Requests from security directors, administrative assistants, flight departments, and travel coordinators for a better solution

• Global ground risk mitigation: marrying service and security

• Expertise & Focus

• Mobile Security Specialists

• Science & Technology

4

G R O U N D W O R K O V E R V I E W

5

T I M E L I N E : E V O L U T I O N O F R E A L - T I M E I N F O R M AT I O N A N D S O C I A L M E D I A

5

6

P E R S I S T E N T R I S E I N S O C I A L M E D I A U S E I N T H E U N I T E D S TAT E S

6

7

S O C I A L M E D I A U S E R S A C C E S S T H E I R A C C O U N T S D A I LY

7

76% of Facebook users, 51% of Instagram users, and 42% of Twitter users access their accounts daily

Note: Do not know/refused responses not shown. Source Survey conducted March 7-April 4, 2016.“Social Media Update 2016” Pew Research Center

8

I M P L I C AT I O N S F O R S E C U R I T Y T E A M S

• Social media is a huge dataset that must be processed

• Twitter is an essential dataset for real-time information

• Teams need the right tools and staff to extract value

• Social media:

• Is noisy

• Contains false positives

• Is unverified

8

9

U S I N G S O C I A L M E D I A T O Y O U R A D VA N TA G E : E A R LY T H R E AT D E T E C T I O N

• Social media is fast

• People tweet when they witness events, and this forms a global sensor network

• As an event unfolds, posts, some containing media, help you better understand the incident

• Providing accurate real-time information to the people “on the ground” helps them make decisions in the moment

9

10

M A N C H E S T E R AT TA C K

10

Attack Occurs

10:33 p.m.

10:35 p.m.

Dataminr Urgent Alert

10:47 p.m.

Image From Scene

Wtf is happening in Manchester

arena? Massive bang & everyone is

running & screaming, people are

crying

22 May 2017 – 10:35 PM Explosion at Victoria Station

manchester

22 May 2017 – 10:47 PM

11

• Gain visibility into and context around events in remote areas

• Mitigate a new threat stream

• Gauge relevant public discourse

• Avoid moving into an active event

11

Speed Context

Threat Mitigation &

Reputational

Management

Real

Time

U S I N G S O C I A L M E D I A T O Y O U R A D VA N TA G E : C O N T E X T A N D G L O B A L C O V E R A G E

12

T U R K E Y C O U P AT T E M P T

12

5:06 p.m.

PM Announces Coup Attempt

3:15 p.m.

Dataminr’s First Alert

Translated from Turkish:

ANKARA gunshots, jets flying

low .. what's happening?

15 Jul 2016 – 3:15 PM

#BREAKING Turkish army and

tanks deploy to #Istanbul

streets.. Tense situation..

unclear yet..

15 Jul 2016 – 4:03 PM

Tarlabasi street near

Taksim has been closed by

Police. #istanbul

15 Jul 2016 – 4:24 PM

4:03 p.m. 4:24 p.m.3:42 p.m.

Major News Reports

13

F O R T L A U D E R D A L E A I R P O R T S H O O T I N G

13

5:06 p.m.

Airport is Closed

12:57 p.m.

Dataminr Alert

1:09 p.m.

Injury Reports

1:22 p.m.

Shooter in Custody

@AriFleischer: I’m at the Ft.

Lauderdale Airport. Shots have

been fired. Everyone is running.

6 Jan 2017 – 12:57 PM

12:54 p.m.

Shots Fired

14

• True protection is not only concerned with physical risks

• Social

• Reputational

• Electronic

• Data

• Financial

• Early threat detection helps protect security personnel and principals

C H A L L E N G E S : E X E C U T I V E P R O T E C T I O N

14

15

C H A L L E N G E S : E X E C U T I V E P R O T E C T I O N• The sharing of sensitive information can impact your executive protection plan. Such posts may include:

• The location of your principle

• Compromising imagery

• Travel itineraries

• For most executives and travelers the risks are geographic or political threats – not personal

• Examples include Nice, Paris, Manchester, Westminster, San Bernardino, Fort Lauderdale Airport

• Travelers encounter unpredictable threats – so real-time, accurate information is key

• A vetted and trusted system for getting critical information into the hands of the protection team – FAST!

15

16

C H A L L E N G E S : E X E C U T I V E P R O T E C T I O N• Using social media to “know before you go”

• Social media is the best way to understand what is happening on the ground – right now – anywhere on earth

• Planning and preparation for protection missions in unfamiliar or rapidly changing environments is essential

• Information WITH context allows experienced professionals to make decisions, both during planning and execution

16

17

C H A L L E N G E S : E X E C U T I V E P R O T E C T I O N

17

Just saw Justin Bieber at the

Raddison!!

18 Jul 2016 – 3:13 AM

Seems a plane belonging to #Guptas

landed at #ORT last night. private jet

(tail number ZS-OAK) arrived from

#Dubai around 19:00 on Monday.

3 May 2016 – 7:38 AM

Hey @JetBlue your President/ CEO

is on my flight right now. Tell him I’m

happy to take the free tix he’s gonna

give away!

8 Jun 2016 – 5:23 PM

18

U S I N G S O C I A L M E D I A T O Y O U R A D VA N TA G E : T R AV E L S E C U R I T Y

• Ensure travel is undisrupted by assessing social media for:

• Weather issues

• Flight delays and airport disruptions

• Traffic and rail incidents

• Violent incidents or criminal activity

18

19

B R U S S E L S AT TA C K

19

Attack Occurs

2:55 a.m.

3:06 a.m.

Dataminr Urgent Alert

Urgent: Brussels Airport

Explosions report: Local Source

via Twitter

22 Mar 2016 – 3:06 AM

20

C H A L L E N G E S : C O N T E N T P R O T E C T I O N

• Posts can also endanger proprietary information, this includes:

• Creative content, like scripts, trailers, casting decisions, and ads

• Customer or employee information

20

21

C H A L L E N G E S : C O N T E N T P R O T E C T I O N

21

hauntedfalcon: maysills: maysills:

I’m reading the original wonder

woman script by Joss Whedon and

YIKES..

https://tmblr.co/ZW4bKy2MmPp_z

15 May 2017 – 6:36 PM

@videograndpa @TyRoot Star Wars

Battlefront 2 ad got leaked

vimeo.com/212842535

11 Apr 2017 – 9:31 PM

Massive WWE Leak Exposes 3

Million Wrestling Fans' Addresses,

Ethnicities And More

forbes.com/sites/thomasbr…

6 Jul 2017 – 1:19 PM

22

C H A L L E N G E S : B R A N D S E C U R I T Y

• Be aware when your brand is being discussed in a negative light:

• Assess the success of your advertising or messaging campaign through social media discussion

• Be alerted when your brand is mentioned in a negative context

22

23

C H A L L E N G E S : B R A N D S E C U R I T Y

23

24

B E S T P R A C T I C E S : I N C O R P O R AT I N G S O C I A L M E D I A

• Understand gaps, goals and metrics to measure success (ROI) in advance

• Process, process, process!

• Understand datasets and relationships with data

• Coordinate with other internal social media stakeholders

• Vendors should be a partner not just a delivery method

24

25

C O N TA C T U S

25

Dillon TwomblyVP Corporate Risk, Dataminr

dtwombly@dataminr.com

Clay HendonManaging Director Global Security, Groundwork

chendon@groundworkglobal.com