The 9th Annual Black Hat USA Network Operations Center (NOC) Report
summary
NOC report lists concrete changes and failures: the festival network runs on 2×10‑gig circuits from Lumen, Arista switching with Rista APs, Palo Alto firewalls and NetWitness packet capture, and Cisco Umbrella and MDM. Dashboards and ThousandEyes probes reveal latency and a multicast mDNS leakage; automation and ID’ing cut scale problems but new gear causes class outages. The team sandboxes traffic — roughly 29,000 files submitted to Threat Grid — and documents oddities like HTTP over ICMP and exposed camera/location apps.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 0:54Meet the Team
- 2:02Meet the Partners
- 3:22Equipment
- 4:09Network Architecture
- 4:58Partnership
- 7:03Dashboards
- 9:37ThousandEyes
- 10:23NOC Stats
- 11:44Mobile Device Management
- 12:59DNS DNS
- 13:37Network Setup
- 20:44Lessons Learned
- 23:26Investigations
- 24:33ICMP Traffic
- 26:09Registration Attacks
- 27:43Arranged Marriage
- 28:54Social Media
- 30:59Wireshark
- 31:54Black Hat QA
related talks
54mLessons and Lulz: The 5th Annual Black Hat USA NOC Report
40mThe NOC Report
38mThe Black Hat Europe Network Operations Center (NOC) Report
45mThe Black Hat NOC: Greatest Hits and Holy...Cows
47mDecisions and Revisions - The Ever Evolving Face of the Black Hat NOC
33mThe Black Hat Europe NOC Report
45mDecisions and Revisions - The Ever Evolving Face of the Black Hat NOC
47mTales from the NOC: Going Public in Asia