Hepix 2006

Session

Cyber Security/Authentication

17

Oct 11, 2006, 3:00 PM

Jefferson Lab

Contribution list Timetable

25. The Stakkato Intrusions

Leif Nixon

10/11/06, 3:30 PM

During 15 months, from late 2003 until early 2005, hundreds of supercomputing sites, universities and companies worldwide were hit by a series of intrusions, with the perpetrator leapfrogging from site to site using stolen ssh passwords. These are collectively known as the Stakkato intrusions, and includethe Teragrid Incident and the Cisco IOS source code theft, both of which...

9. Network Security Monitoring with Sguil

David Bianco (Jlab)

10/11/06, 4:15 PM

Most mid- or large-sized organizations conduct some sort of network monitoring for security purposes. Traditional Intrusion Detection Systems (IDS) tell only part of the story, leaving analysts to perform complex and time-consuming data-mining operations from multiple sources just to answer simple questions about IDS alerts. This talk presents a more efficient model that uses the open...