A Case Study - Using Flow to Identify Specific Malware Characteristics

January 11, 2010 • Presentation

By

Jonathan Taimanglo (Department of Homeland Security) and Michael Jacobs

In this presentation, US-CERT staff explain how they narrowed a large dataset to a few suspicious IP addresses using SiLK and PERL.

Publisher

Software Engineering Institute

Topic or Tag

Abstract

In this presentation, given at FloCon 2010, US-CERT staff explain how they narrowed a large dataset to a few suspicious IP addresses using SiLK and PERL.