Speakers & Organizers   

www.ArborNetworks.com Biography
Sunil James is Arbor Networks' Product Manager for the Active Threat Feed (ATF) service. In this capacity, he is responsible for overall ATF product strategy as well management of the Arbor Security Engineering & Response Team (ASERT). Prior to joining Arbor, James served as Deputy Director of Vulnerability Intelligence at iDEFENSE Inc., where he managed and coordinated the company's daily collection and analysis of publicized vulnerabilities and exploits. In 2002, he co-founded iDEFENSE's Vulnerability Contributor Program (VCP), which, at the time, was the first publicly-acknowledged "for-pay" vulnerability research initiative. James has also been employed by the US Department of State, the Council on Foreign Relations, Johns Hopkins University, and Pinkerton Global Intelligence Services. James earned from SUNY Stony Brook a dual BS in Computer Science with an Applied Mathematics concentration, and Political Science with an International Relations concentration."

---

Session TE15: The Changing Internet Ecology: Employing Behavioral Anomaly Detection to Identify & Thwart New Infrastructure Security Threats
February 18, 15:00 - 15:45 Abstract:
Valerie McNiven, a former World Bank security expert, said in 2005 that the proceeds of cybercrime now exceed that of the illegal drugs industry; the turnover of electronically related crime exceeded $105 billion in 2004, for the first time over-taking drugs as the number one high-profile criminal activity. The validity of McNiven's statement could not be truer today. More and more, new classes of attacks are being researched, developed and employed by rogue hackers as well as well-defined, well-structured organized crime groups, to name a few. The purpose of such attacks is to incur infrastructure - and, in turn, financial - damage to local, state, and federal governments, various sized financial services institutions, and their respective "customers".

During this session, James will present some of these threats facing a variety of infrastructures. Ranging from botnets and phishing attacks to remote access applications and malicious code, the session will detail the kinds of network behaviors exhibited by each. The session will also provide insight into how behavioral anomaly detection techniques, which correlate distinct behaviors, can be employed to ensure accurate and effective threat identification and mitigation."