Anatomy of Denial of Service Mitigation Testing
Gregory S. Miles explores anatomy of denial of service mitigation testing at DEF CON 10, examining ip-backtracing and practical defenses.
Summary
Architecture and Background
Miles - Anatomy of Denial of Service Mitigation Testing DOC has had the privilege of working on a project that was focused on looking at new product technologies relating to DOS and DDOS mitigation. Several commercial companies were formed who's entire focus was to find solutions to DOS and DDOS issues. Different types of detection were used in each product from pure rate analysis to statistical analysis and anomaly detection. This talk will focus on the testing methodology, testing results, lessons learned, and thoughts on the direction that this technology will be moving.
Vulnerability Analysis
DOC has over 15 years of information technology and security experience in the USAF, Defense Information System Agency (DISA), commercial and manufacturing industries. DOC is CIO for Security Horizon, Inc, a security professional services firm with HQ is Colorado Springs. His focus there has been on Organizational focused activities to include security assessments, policy and procedure development, and project management. He is also an authorized instructor of the NSA INFOSEC Assessment Methodology.
Exploitation and Demonstrations
DOC has built and managed Computer Incident Response Teams (CIRT) and provided extensive technical and project management skills related to information security. He has served as Director, CyberCrime Response, responsible for CIRT, Computer Forensics, and Training responsibilities. He has served as an INFOSEC Program Manager, where he was responsible for establishing and supporting the worldwide security program for the U.S. Defense Information Systems Agency's Field Security Operations, to include Computer Emergency Response Teams (CERT) in 5 locations worldwide.
Remediation and Defensive Strategies
Greg also served as a Senior INFOSEC Engineer, supporting NASA's efforts with the Earth Observing System. DOC served 6 years in the U.S. Air Force with a concentration in Information and Security. He has authored articles for security periodicals and websites, to include "The International CyberCrime Journal, DuckTank (now Security Horizon), and Small Business Marketing Ideas. DOC has been a previous technical speaker at the BlackHat Briefings and APCO conventions.
Related talks
Main Stage·40 min
Jaeson Schultz · Lawrence Baldwin
Jaeson Schultz & Lawrence Baldwin - Extreme IP Backtracing A prudent System Administrator will review system logs.
Main Stage·49 min
Nicolas Fischbach · Sébastien Lacoste-Seris
Nicolas Fischbach and Sébastien Lacoste-Seris explores router security and forensics at DEF CON 10, examining router-security and practical defenses.
IEEE Symposium on Security and Privacy·6 min
Engineers explore architecture and security mechanisms for S&P15 Short Talks: Anoop Singhal, A Logic Based Network Forensics Model for Evidence Analysis.