AISA Brisbane Branch Meeting: Network Capture for Maximum Effect
Starts: Wednesday 22 February 2012, 5:15PM
Finishes: Wednesday 22 February 2012, 7:00PM
Start Time: 5:15pm
Venue: BDO, Level 15, HSBC Building, 300 Queen
Street, Brisbane
Topic: Network Capture for Maximum Effect
This presentation demonstrates the benefits of capturing full
session network data to improve detection of significant security
threats in your network. Using network captures from recent
forensic investigations we reveal patterns of malicious behaviour
that elude even the best intrusion detection and firewall controls.
Knowing where to capture is just as important as knowing what to
look for. During this presentation we explore the locations in your
network best placed to discover evidence of insider abuse, fraud,
0-day malware and APT behaviour.
Speaker: Paul Nevin
Paul Nevin is a Senior Cyber Investigator with RSA NetWitness. He
has over 12 years' experience investigating computer network
compromises on commercial, Government and Defence networks around
the world. Paul has just completed a doctorate on cyber espionage
intrusion detection and has several patents pending for
technologies to improve computer network defence.
Many thanks to our sponsor:
AISA thanks BDO for providing the venue for our Brisbane Branch
meetings this year.
