Collecting Network Intrusion Data at the SANS Internet Storm Center

Johannes Ullrich, Ph.D.
Dean of Research
SANS Technology Institute

Date: Wednesday, Nov. 29
Time: 5 – 5:45 p.m.
Location: https://utsa.zoom.us/j/94439205606

The SANS Internet Storm Center, with the help of DShield.org, has been collecting firewall and honeypot logs for over 20 years. This data is made available to researchers and security practitioners via our website and APIs. Learn how the data is collected, how our honeypots work and how to use our data to support research or network security efforts. The data collected is unique in how it measures the “internet background radiation” of worms and bots looking for their next victim.

Biography

Johannes Ullrich, Ph.D. is the Dean of Research for SANS Technology Institute, a SANS Faculty Fellow, and founder of the Internet Storm Center (DShield.org) which provides a free analysis and warning service to thousands of Internet users and organizations. He is the host of the SANS Internet Storm Center Daily Stormcast, a daily podcast that provides a brief 5-minute summary of current network security-related events. Ullrich is a member of the Board of Advisors for Threatstop, Inc, earned a Ph.D. in physics from SUNY Albany, and holds multiple security-related certifications. He was awarded the ISSA President’s Award for Public Service in 2018, named one of the Top 5 Influential Security Thinkers by SC Magazine and one of the Top 50 Most Powerful People in Networking by Network World in 2004.