Fighting malware and spam

CSI - cyber security investigators

Bryan Sartin Ubizen

The use of forensics analysis in information security is growing, much in response to a sharp uptake in more criminally motivated attacks on organizations' networks and IT infrastructure. Much like their law enforcement brethren glamorized on popular TV shows, cyber forensics experts use forensics investigative techniques to examine attacks on comprised networks, tracing a hacker's "footsteps and fingerprints" to determine a motive, a target and, in best case scenarios, the hacker's identity. In this presentation, security expert Bryan Sartin will explore the ever-intriguing and complex field of forensics analysis.

Beginning with hacking attempts that breach a network's security defenses, the presentation will walk attendees through the processes by which cyber forensics teams identify the source of compromises, determine if data has been damaged or stolen and investigate how compromises are executed. Sartin will also discuss how forensics experts methodically comb through network systems to pinpoint affected systems and to gather electronic evidence, which must be carefully preserved for future research or legal prosecution. Attendees will receive both technical and business perspectives on the benefits of forensics analysis when breaches occur and leveraging investigation findings in overall network security strategies. Additionally, attendees will learn methods, such as gap analysis, to be employed after an attack to mitigate vulnerabilities and to compare a company's security infrastructure to current security standards.