De Charleta: “Introducing the RITA VM: Hunting for bad guys on your network for free with math” (John Strand, Derek Banks, Joff Thyer, and Brian Furhman)

John Strand y su equipo nos muestran una forma distinta de detectar si una red está comprometida huyendo de la fórmula clasica y del uso de producto comerciales. Para ello ulitilizan RITA, un framework que utiliza el análisis estadístico para analizar el tráfico DNS y las conexiones a paneles de C&C para descubrir adversarios que se encuentren dentro de la red.

John, Derek, Joff y Brian son consultores de seguridad en Black Hills. Además John Strand es el dueño de la compañía.
Joff Thyer es también conocido por escribir en Security Weekly.

Derbycon 2015


Ernesto Corral
25 comentarios
  1. download mp3 free
    download mp3 free Dice:

    After going over a handful of the blog articles on your web site, I really appreciate your way of blogging. I saved as a favorite it to my bookmark site list and will be checking back soon. Please visit my web site as well and tell me what you think.

  2. bucket hat
    bucket hat Dice:

    I’m noo longer certain the place you are getting yourr information, however good topic.
    I must spend a while learning much more or working out more.
    Thank you for wonderful information I used to bee searching
    for this information for my mission.

  3. Dice:

    Appreciating the time and effort youu put into yojr site and in depth
    information you present. It’s good to come across a blog every once in a while
    that isn’t the same old rehashed information. Fanrastic read!
    I’ve saqved your site and I’m adding your RSS feeds to my Google account.

  4. donald trump mug shot memes
    donald trump mug shot memes Dice:

    Hey, I think your sitte might be having browser compatibility issues.
    When I look at your blog iin Firefox, iit looks fie but whjen opening in Internet Explorer, it
    has some overlapping. I just wantedd to gice you a quick heads up!
    Other then that, superb blog!

  5. youtube to mp3 320kbps
    youtube to mp3 320kbps Dice:

    Having read this I believed it was extremely enlightening. I appreciate you spending some time and effort to put this article together. I once again find myself personally spending a lot of time both reading and commenting. But so what, it was still worth it.

  6. tubidy mp3
    tubidy mp3 Dice:

    Greetings, There’s no doubt that your website may be having web browser compatibility problems. Whenever I take a look at your website in Safari, it looks fine however, when opening in Internet Explorer, it has some overlapping issues. I simply wanted to provide you with a quick heads up! Apart from that, excellent site!

  7. Dice:

    I am curious to find out what blog system you
    happen to be using? I’m experiencing some small security issues with my latest blog and I’d like to find something more secure.
    Do you have any solutions?

  8. Trump2024
    Trump2024 Dice:

    After ooking into a few of the articles on your blog, I seriously
    like your technique of blogging. I added itt to my bookmark site list and willl be checking back in the nerar future.
    Take a look at my web site too and let me know howw you feel.

  9. Scarf Set
    Scarf Set Dice:

    Wow that was strange. I just wrote an extremely long comment but after I clicked suvmit my comment didn’t appear.
    Grrrr… well I’m not writing alll that over again. Regardless, just
    wanted to say excellent blog!

Dejar un comentario

¿Quieres unirte a la conversación?
Siéntete libre de contribuir!

Deja una respuesta

Tu dirección de correo electrónico no será publicada. Los campos obligatorios están marcados con *