No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling
7
Copyright 2006 InternetPerils, Inc © 2 0 0 6 I n t e r n e t P e r i l s, Inc. No Substitute for Ongoing Data, Quantification, Visualization, and Story- Telling John S. Quarterman Gretchen K. Phillips InternetPerils 1 August 2006 Metricon Vancouver, BC
-
Upload
amiableindian -
Category
Technology
-
view
1.347 -
download
2
description
No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling
Transcript of No Substitute for Ongoing Data, Quantification, Visualization, and Story-Telling
Copyright 2006 InternetPerils, Inc
© 2 0 0 6 I n t e r n e t P e r i l s, Inc.
No Substitutefor Ongoing Data,
Quantification,Visualization,
and Story-Telling
John S. QuartermanGretchen K.
PhillipsInternetPerils
1 August 2006Metricon
Vancouver, BC
Copyright 2006 InternetPerils, Inc
© 2 0 0 6 I n t e r n e t P e r i l s, Inc.
A Month's Phishing Infestation
Copyright 2006 InternetPerils, Inc
© 2 0 0 6 I n t e r n e t P e r i l s, Inc.
Multiple Servers and Targets
• Both red and green nodes are phishing servers
• Some churn in ongoing infestation
• Multiple targets, e.g., paypal and ebay
• No single target would know this
• Phishers use leverage of Internet: can't counter that
alone
• Lists of phishing servers from APWG repository
• Topology & performance data & visualization by
InternetPerils
• Give to collaborate: report phishing to APWG; focus
nodes to monitoring companies; etc.; iterate for
collective action
Copyright 2006 InternetPerils, Inc
© 2 0 0 6 I n t e r n e t P e r i l s, Inc.
Know Your Network Neighborhood
Copyright 2006 InternetPerils, Inc
© 2 0 0 6 I n t e r n e t P e r i l s, Inc.
Hurricane Ivan Meets Cayman Islands
Copyright 2006 InternetPerils, Inc
© 2 0 0 6 I n t e r n e t P e r i l s, Inc.
No Substitute• ISPs won't tell you (competitive info.; embarrassment)• ISPs can't tell you: don't know outside their network• Running forensic tools yourself is not enough• Need early warning: need independent 3rd party data • Need real data for baselines + longitudinal + ongoing• Already watching when events occur + frequent scans
to catch event + specific focus + wide view to see related
• Quantify + visualize for pattern recognition and presentation
• Tell a story!
Copyright 2006 InternetPerils, Inc
© 2 0 0 6 I n t e r n e t P e r i l s, Inc.
Contact Information
John S. Quarterman [email protected]
Gretchen K. Phillips
www.internetperils.com
book: Risk Management Solutions
