Explore innovative techniques for visualizing IP and DNS data to track Internet threats in this 19-minute conference talk from Kaspersky Lab's Security Analyst Summit. Delve into the world of threat intelligence platforms and data centers as speakers Dhia Mahjoub and Thibault Reuille from OpenDNS present various data visualization models. Learn about domain IP associations, malware families, and volume evolution graphs. Discover different occurrence models, including regular and irregular chains, circuits, and labyrinths. Gain insights into the application of particle physics concepts to Internet visualization and examine a case study on the Ukrainian ASA Network. Enhance your understanding of cutting-edge approaches to cybersecurity and network analysis through this informative presentation.
Tracking Internet Threats by Visualizing IP and DNS Data
Overview
Syllabus
Introduction
Who am I
Agenda
Data Centers
Threat Intelligence Platform
OpenDNS
Data set
Domain IP associations
Malware families
Volume evolution graph
Occurrence model
Regular chain
Irregular chain
Circuit
Irregular Circuit
Thick Circuit
Labyrinth
Python Library
Particle Physics
The Internet
The Ukrainian ASA Network
Final Thoughts
Conclusion
Taught by
Kaspersky
