Explore a comprehensive overview of Cymon, a new cyber monitoring tool, in this 49-minute conference talk by Roy Firestein at Converge 2015. Learn about the concept of events in cybersecurity, the vast amount of information processed, and Cymon's web interface. Discover key features including timeline visualization, glow and map visualizations, API interface, and Twitter integration. Delve into advanced functionalities such as dynamic block listing, machine learning applications, threat scoring, and IP threat intelligence. Examine how Cymon leverages big data analysis and cloud technology for enhanced cybersecurity. Gain insights into upcoming developments, including a Google Chrome plugin, and explore challenges in machine learning and packet capture for cyber threat detection.
Overview
Syllabus
Intro
What is Simon
What are events
How much information comes in
Events
Sources
Web Interface
Demo
Timeline
Comments
Glow Visualization
Map Visualization
API Interface
Twitter Robot
Dynamic Block List
Machine Learning
Daily Domain List
Threat Scoring
Example
IP Threat Intelligence
Simon
Bittorrent Data
Passive Pen Testing
Other Tools
Soultry Edge
ThreadConnect
ThreadStack
MostDef
IP Address
Cloud Enabled
Big Data Analysis
Biggest Benefits
Workers
Upcoming
Google Chrome Plugin
Other Ideas
Detect Malware Domains
Active vs Passive
DNS Lookup
Machine Learning Challenges
Packet Capture
Who is Information
Retired Information
Thread Scoring
Filtering
Feedback Loop
Private Feeds
