Charla impartida por Dragos Lungu de BitDefender, en el evento "Asegura IT Camp2" que tuvo lugar los días 22, 23 y 24 de Octubre de 2010 en El Escorial.

1. BitDefender: Defensa centralizada contra amenazas multi-vector –
Configuración de un centro de respuesta para incidentes de
seguridad informática
Dragos Lungu, BitDefender Consultant

2. Buzzwords are not enough!

3. •Stuxnet : digital weapon attacking Siemens'•Stuxnet : digital weapon attacking Siemens'
WinCC / PCS 7 SCADA Systems
•ZeuS/ZBOT Trojan : loots money from bank
accounts
•Spanair Flight JK 502 : malware led to 20
August 2008 tragedy, 154 people died.

4. CERT / CSIRT

5. Incident Management
•Early Detection
•Handling & Remediation
•Prevention

6. Incident Triage
•Incident Triage: What hit me?
•Attacker Profiler : Who is behind this ?
•Sizing the Incident: How hard was I hit ?

7. Incident Coordination
•Root cause analysis
•Contacting law enforcement, CERTs
•Documenting and reporting the incident
•Public announcements

8. Incident Resolution
•Removing the Exploits
•Fixing Vulnerabilities•Fixing Vulnerabilities
•Patch Management
•Risk Analysis
•Business Continuity
•Disaster Recovery
•Evidence Collection
•Digital Forensics

9. Proactive Services - People
www.malwarecity.es

10. Proactive Services - Technologies
•Managed Networking & Security Devices
•Security Information & Event Management
•Honeypots (SMTP, HTTP, Other)
•Security Assements & Penetration Testing

11. Proactive Services - Processes
•Procedures, Incident workflow
•Ticket management system
•Affiliations : MSPAlliance, FIRST

12. WÜtzÉá _âÇzâ
f|ÇvxÜxÜxÄç?f|ÇvxÜxÜxÄç?f|ÇvxÜxÜxÄç?f|ÇvxÜxÜxÄç?