FloCon 2016 Archive

FloCon 2016 showcased next-generation analytic techniques and was geared toward operational analysts, tool developers, researchers, and others interested in applying the latest analytics against large volumes of traffic.

This archive includes:

• Achieving a Secure and Resilient Cyber Ecosystem: A Way Ahead (Keynote), Dr. Peter M. Fonash
• A Meaningful Metric for IPv4 Addresses, Leigh B. Metcalf
• Better Reporting Guidelines for Better Data, Christopher Washington and Brian Allen
• Capturing and Processing One Million Network Flows Per Second with SiLK: Challenges and Strategies, Robert W. Techentin, David R. Holmes, James C. Nelms, and Barry K. Gilbert
• Command and Control Mechanism Trends in Exploit Kits, RATs, APTs, and Other Malware, Mark Mager
• Detecting Traffic to Recently Unparked Domains with Analysis Pipeline, Daniel Ruef
• Distributed Sensor Data Contextualization at Scale for Threat Intelligence Analysis, Jason Trost
• Gosh Wow, Volusia Networks!, Brian Whiting
• Graph Analysis Techniques for Network Flow Records Using Open Cyber Ontology Group (OCOG) Format, Robert W. Techentin, David R. Holmes, James C. Nelms, and Barry K. Gilbert
• Intelligence Driven Malware Analysis (IDMA) Malicious Profiling, Casey Kahsen
• Making the Most of a Lot [of Data]: Netflow in US-CERT Operations, Chad Hein
• Merging Network Configuration and Network Traffic Data in ISP-Level Analyses, Timothy J. Shimeall
• Minimizing the Gaps with Bro, GRR, and Elk (Brogrrelk), David Zito
• Monitoring and Classification of Active IPv6 Addresses, David Plonka
• Netflow Analysis - Intrusion Detection, Protection, and Usage Reporting, Jonzy Jones
• Netflow in Daily Information Security Operations, Mike Pochan
• Network Monitoring and Deceptive Defenses, Michael Collins and Brian Satira
• Network Security Analytics, HPC Platforms, Hadoop, and Graphs... Oh, My, Aaron Bossert
• Network Traffic Analysis - SiLK, Paul Krystosek and Matthew Heckathorn
• New DNS Traffic Analysis Techniques to Identify Global Internet Threats, Dhia Mahjoub and Thomas Mathew
• Planning Curricula for the Network Traffic Analyst of 2018-2020, Timothy J. Shimeall
• Role Model Transformations for Flow Analysis in Cyberdefense, John Gerth
• Situational Awareness Threat Report (SATR), Stacie Green and Casey Kahsen
• Suricata Tutorial, Victor Julien and Eric Leblond
• Towards 100 Gbit Flow-Based Network Monitoring, Luca Deri and Alfredo Cardigliano
• Using Domain Name Registrant Information to Identify Malicious Domains, Mark Langston
• FloCon 2016 Sponsorship Opportunities (Brochure)