Daniel Negron, a researcher at Noblis, Inc., will present the tools and techniques involved in a novel approach developed with Michael Collins, Chief Scientist at RedJack, for defending against file exfiltration attacks. The presentation will highlight the coordinated use of techniques from the security and malware communities for deceptive defense. Specifically, the presentation will focus on natural language processing, decoy document generation, steganography, file inflation, and alternate data streams to confuse, delay, and pressure attackers to the point of frustration. In addition, the presentation illustrates how simulations may implement adversarial games to balance system and analyst resources with the goal of minimizing attacker payoff.

Back to Bloomcon 2017 video list