www.ArborNetworks.com
Biography
Sunil James is Arbor Networks' Product Manager for the Active
Threat Feed (ATF) service. In this capacity, he is responsible for overall
ATF product strategy as well management of the Arbor Security Engineering &
Response Team (ASERT). Prior to joining Arbor, James served as Deputy
Director of Vulnerability Intelligence at iDEFENSE Inc., where he managed and
coordinated the company's daily collection and analysis of publicized
vulnerabilities and exploits. In 2002, he co-founded iDEFENSE's Vulnerability
Contributor Program (VCP), which, at the time, was the first
publicly-acknowledged "for-pay" vulnerability research initiative. James has
also been employed by the US Department of State, the Council on Foreign
Relations, Johns Hopkins University, and Pinkerton Global Intelligence
Services. James earned from SUNY Stony Brook a dual BS in Computer Science
with an Applied Mathematics concentration, and Political Science with an
International Relations concentration."
|
Session TE15: The Changing Internet Ecology: Employing Behavioral Anomaly Detection to
Identify & Thwart New Infrastructure Security Threats
February 18, 15:00 - 15:45
Abstract:
Valerie McNiven, a former World Bank security expert,
said in 2005 that the proceeds of cybercrime now exceed that of the illegal
drugs industry; the turnover of electronically related crime exceeded $105
billion in 2004, for the first time over-taking drugs as the number one
high-profile criminal activity. The validity of McNiven's statement could not
be truer today. More and more, new classes of attacks are being researched,
developed and employed by rogue hackers as well as well-defined,
well-structured organized crime groups, to name a few. The purpose of such
attacks is to incur infrastructure - and, in turn, financial - damage to
local, state, and federal governments, various sized financial services
institutions, and their respective "customers".
During this session, James will present some of these threats facing a
variety of infrastructures. Ranging from botnets and phishing attacks to
remote access applications and malicious code, the session will detail the
kinds of network behaviors exhibited by each. The session will also provide
insight into how behavioral anomaly detection techniques, which correlate
distinct behaviors, can be employed to ensure accurate and effective threat
identification and mitigation."
|
