Saturday, December 19, 2009

Favorite Speaker Quotes from SANS Incident Detection Summit

Taking another countenance at my notes, I institute a bunch of quotes from speakers that I intellection you might like to hear.
  • "If you think you're not using a MSSP, you already are. It's titled anti-virus." Can anyone claim that, from the CIRTs and MSSPs panel?
  • Seth uranologist said "Bro is a programming module with a -i alter to inspire traffic."
  • Seth uranologist said "You're feat to lose." Matt Olney united and swollen on that by saying "Hopefully you're feat to retrograde in a way you recognize."
  • Matt Olney also said "Give your shrink a chance." ["All we are sayyy-ing..."]
  • Matt Jonkman said "Don't be afeard of blocking." It's not 2004 anymore. Matt stressed the programme of reputation when triggering signatures, for example onset an alert when an Amazon.com-style address letter is sent to a non-Amazon.com server.
  • Ron Shaffer said "Bad guys are following the rules of your network to fulfill their mission."
  • Steve Sturges said "Snort 3.0 is a investigate project."
  • Gunter Ollmann said "Threats have a declining interest in persistence. Just utilise the application and finish when closed. Users are due to repeat venturous behavior, and embellish compromised again anyway."
Thanks again to all of our speakers!Copyright 2003-2009 Richard Bejtlich and TaoSecurity (taosecurity.blogspot.com and www.taosecurity.com)

0 komentar:

Post a Comment