The focus of this workshop is the application of scientific practices to cyber security research. The objective of this workshop is examine the implementation of science practices in cyber defense research and understand the ramification of tradeoffs between simplifications to obtain interpretable results vs. observational studies of systems in the wild where the results can lead to ambiguous interpretations. The research papers accepted addressed a wide variety of technical questions in the cyber domain and the maturity of the work spanned the range of initial ideas and proofs of concept to mature work that is ready for operational implementation. Papers were evaluated for the reproducibility of the work as represented by the documentation of methods and testing environments.

Abstract Recent increases in terrorist activity around the world have made analyzing and understanding such activities more critical than ever. With the help of organizations such as the National Center for the Study of Terrorism and Responses to Terrorism (START), we now have detailed historical information on each terrorist event around the world since 1970. However, due to the size and complexity of the data, identifying terrorists' patterns and trends has been difficult. To better enable investigators in understanding terrorist activities, we propose a visual analytical system that focuses on depicting one of the most fundamental concepts in investigative analysis, the five W's (who, what, where, when, and why). Views in our system are highly correlated, and each represents one of the W's. With this approach, an investigator can interactively explore terrorist activities efficiently and discover reasons of attacks (why) by identifying patterns temporally (when), geo‐spatially (where), between multiple terrorist groups (who), and across different methods or modes of attacks (what). By coupling a global perspective with the details gleaned from asking these five questions, the system allows analysts to think both tactically and strategically.