Cyber criminals are increasingly exploiting the Internet services to build agile and resilient infrastructures, and consequently to protect themselves from being exposed and taken over. This session will explain how the correlation of Internet data on multiple levels (DNS, BGP, ASN, Prefixes/IPs) can be used to build and deliver a new model of security that is pervasive and predictive, and that allows us to expose the attackers' infrastructure. Detection models that can be built and applied (such as co-occurrences, NLPRank, and Spike Detectors), and how the different detectors can be integrated to expose malicious infrastructures and advanced threats.

I am a security professional helping organizations deploy advanced solutions that expose, prevent and remediate malware threats such as phishing attacks, ransomware, bots, and crypto-mining across their environment. Additionally, I am tasked with providing security strategies for companies leveraging cloud-based applications and services. I have served in engineering roles for several companies including RSA, Guidance Software, Malwarebytes, and am currently a Consulting Systems Engineer for Cisco Could Security.

Back to BSides Cleveland 2018 video list