• Share
  • Email
  • Embed
  • Like
  • Save
  • Private Content
No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling
 

No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling

on

  • 2,110 views

No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling

No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling

Statistics

Views

Total Views
2,110
Views on SlideShare
2,100
Embed Views
10

Actions

Likes
1
Downloads
12
Comments
0

2 Embeds 10

http://www.secguru.com 7
http://www.slideshare.net 3

Accessibility

Categories

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

    No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling Presentation Transcript

    • No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling John S. Quarterman Gretchen K. Phillips InternetPerils 1 August 2006 Metricon Vancouver, BC
    • A Month's Phishing Infestation
    • Multiple Servers and Targets
      • Both red and green nodes are phishing servers
      • Some churn in ongoing infestation
      • Multiple targets, e.g., paypal and ebay
      • No single target would know this
      • Phishers use leverage of Internet: can't counter that alone
      • Lists of phishing servers from APWG repository
      • Topology & performance data & visualization by InternetPerils
      • Give to collaborate: report phishing to APWG; focus nodes to monitoring companies; etc.; iterate for collective action
    • Know Your Network Neighborhood
    • Hurricane Ivan Meets Cayman Islands
    • No Substitute
      • ISPs won't tell you (competitive info.; embarrassment)
      • ISPs can't tell you: don't know outside their network
      • Running forensic tools yourself is not enough
      • Need early warning: need independent 3 rd party data
      • Need real data for baselines + longitudinal + ongoing
      • Already watching when events occur + frequent scans to catch event + specific focus + wide view to see related
      • Quantify + visualize for pattern recognition and presentation
      • Tell a story!
    • Contact Information
        • John S. Quarterman
        • [email_address]
        • Gretchen K. Phillips
        • www.internetperils.com
        • book: Risk Management Solutions