Building a network security practice in your organization | Pannel Discussion
summary
Panel claims everyday enterprise networks still emit commodity malware (WannaCry traces persist), public assets and databases are routinely exposed, and small firms face multi‑thousand‑dollar losses from email compromise. Suggested stack: passive sensors on Raspberry Pi, Zeek for high‑fidelity logs, Suricata for signatures, netflow and occasional full packet capture, and kernel‑level tooling via eBPF. Recommended first steps are asset discovery, simple network access monitoring, and logging so incidents can be investigated.
AI-written summary · about
chapters (9)
- 0:00Network security challenges
- 4:00Network security monitoring importance
- 10:41Threat data analysis tools
- 17:20Young practitioners opportunities
- 19:28Starting network monitoring
- 24:23Q&A security advice
- 31:04Changing security culture
- 37:45Evolving traffic patterns
- 40:18Government role in security
related talks
50mCybersecurity for “Have Nots”
40mPractice Safe Networking
27mCollect All the Data; Protect All the Things
29mDetection Engineering: Defending Networks with Purpose
31mConquer the Enterprise from Inside
54mLessons and Lulz: The 5th Annual Black Hat USA NOC Report
50mSoftware Supply Chain: Panel on Threat Intel, Trends, Mitigation Strategies
58mConducting Defensive Information Warfare on Open Platforms