2010-12-08 Modern Methods of Computer Network Protection, Zdenek Vrbka

Society is becoming more and more dependent on information technologies and the Internet, with ever increasing amounts of data stored in digital form and available online.

With this growing dependence on information technology comes a growing potential for abuse. Since 2006, this abuse has evolved into organized cybercrime with a higher level of income than from illegal drugs. This situation clearly illustrates the necessity of modern methods of protection against cyber attacks and misuse of IT infrastructure.

The speaker will present a network security and monitoring approach based on network behavior analysis. This approach uses NetFlow network statistics (L3 Network Layer) and can be used to analyze huge amounts of network traffic, even in encrypted form. The discussion will include techniques for revealing particular attacks/misuses, for example SSH attacks, illegal music sharing using peer-to-peer networks, and social engineering.

The presentation will also include lessons learned in the development of the commercial solution MyNetScope and bringing that product to market.

Zdenek Vrbka is a professor in the Faculty of Informatics, Masaryk University, Czech Republic, where he specializes in software quality and domain understanding and modeling. He holds his PhD degree in Informatics with a specialization in Information Science.

He is also member of the company AdvaICT, a spin-off from Masaryk University, which develops the network security and monitoring solution MyNetScope.

 There will be light refreshments available, also feel free to "brown bag" it and bring in food from the outside to eat during the social hour.