Analyzing Intrusions and Intruders
Sean Bodmer explores analyzing intrusions and intruders at DEF CON 15, examining intrusion-detection and practical defenses.
Summary
Architecture and Background
Sean M. Bodmer: Analyzing Intrusions & Intruders Intrusion Analysis has been primarily reserved for network junkies and bit biters.
Vulnerability Analysis
However, due to the advances in network systems automation we now have time to pay more attention to subtle observations left by attackers at the scene of the incident. Century old sciences have enabled criminal investigators the ability attribute attacks to specific individuals or groups.
Exploitation and Demonstrations
Sean M. Bodmer is an active developer and deployer of intrusion detection systems.
Remediation and Defensive Strategies
Sean is also an active Honeynet Researcher, specializing in analyzing signatures and behaviors used by the blackhat community regarding patterns, methods, and motives behind attacks. Currently Sean is working on a highly-adaptive sensor network under a joint commercial venture in which global sensors are deployed to generate better understandings of various attack approaches and techniques.
Related talks
Main Stage·44 min
Scott Moulton
Scott Moulton details scott Moulton: Re-Animating Drives - Advanced Data Recovery NEW.
Main Stage·48 min
Rich Murphey
Rich Murphey explores windows vista log forensics at DEF CON 15, examining intrusion-detection and practical defenses.
Main Stage·50 min
Jesse DAguanno
Jesse DAguanno explores lan protocol attacks pt1 at DEF CON 15, examining intrusion-detection and practical defenses.


