We show how more general knowledge can be built in information security, by the building of knowledge of mechanism clusters, some of which are multifield. By doing this, we address in a novel way the longstanding philosophical problem of how, if at all, we come to have knowledge that is in any way general, when we seem to be confined to particular experiences. We also address the issue of building knowledge of mechanisms by studying an area that is new to (...) the mechanisms literature: the methods of what we shall call mechanism discovery in information security. This domain offers a fascinating novel constellation of challenges for building more general knowledge. Specifically, the building of stable communicable mechanistic knowledge is impeded by the inherent changeability of software, which is deployed by malicious actors constantly changing how their software attacks, and also by an ineliminable secrecy concerning the details of attacks not just by attackers, but also by information security defenders as they protect their methods from both attackers and commercial competitors. We draw out ideas from the work of the mechanists Darden, Craver, and Glennan to yield an approach to how general knowledge of mechanisms can be painstakingly built. We then use three related examples of active research problems from information security to develop philosophical thinking about building general knowledge using mechanisms, and also apply this to develop insights for information security. We show that further study would be instructive both for practitioners and for philosophers. (shrink)

The use of big data to investigate the spread of infectious diseases or the impact of the built environment on human wellbeing goes beyond the realm of traditional approaches to epidemiology, and includes a large variety of data objects produced by research communities with different methods and goals. This paper addresses the conditions under which researchers link, search and interpret such diverse data by focusing on “data mash-ups”—that is the linking of data from epidemiology, biomedicine, climate and environmental science, which (...) is typically achieved by holding one or more basic parameters, such as geolocation, as invariant. We argue that this strategy works best when epidemiologists interpret localisation procedures through an idiographic perspective that recognises their context-dependence and supports a critical evaluation of the epistemic value of geolocation data whenever they are used for new research purposes. Approaching invariants as strategic constructs can foster data linkage and re-use, and support carefully-targeted predictions in ways that can meaningfully inform public health. At the same time, it explicitly signals the limitations in the scope and applicability of the original datasets incorporated into big data collections, and thus the situated nature of data linkage exercises and their predictive power. (shrink)