Skip to content

Analyzing Intrusions and Intruders

Sean Bodmer

Sean Bodmer explores analyzing intrusions and intruders at DEF CON 15, examining intrusion-detection and practical defenses.

Summary

Architecture and Background

Sean M. Bodmer: Analyzing Intrusions & Intruders Intrusion Analysis has been primarily reserved for network junkies and bit biters.

Vulnerability Analysis

However, due to the advances in network systems automation we now have time to pay more attention to subtle observations left by attackers at the scene of the incident. Century old sciences have enabled criminal investigators the ability attribute attacks to specific individuals or groups.

Exploitation and Demonstrations

Sean M. Bodmer is an active developer and deployer of intrusion detection systems.

Remediation and Defensive Strategies

Sean is also an active Honeynet Researcher, specializing in analyzing signatures and behaviors used by the blackhat community regarding patterns, methods, and motives behind attacks. Currently Sean is working on a highly-adaptive sensor network under a joint commercial venture in which global sensors are deployed to generate better understandings of various attack approaches and techniques.

Related talks

Main Stage·48 min

  • DEF CON
  • Blue Team
  • Date: Aug 2007
  • Location: Las Vegas

Rich Murphey

Rich Murphey explores windows vista log forensics at DEF CON 15, examining intrusion-detection and practical defenses.

intrusion-detectionincident-responsedigital-forensics+1

Main Stage·50 min

  • DEF CON
  • Blue Team
  • Date: Aug 2007
  • Location: Las Vegas

Jesse DAguanno

Jesse DAguanno explores lan protocol attacks pt1 at DEF CON 15, examining intrusion-detection and practical defenses.

intrusion-detectionincident-responsedigital-forensics+1