At VB2017 in Madrid, Cisco Umbrella (OpenDNS) researchers Dhia Mahjoub and David Rodriguez presented a new approach to detecting infected machines using graphs to detect botnet traffic at scale. Today we publish both Dhia and David's paper and the recordi…
Malicious Internet traffic, such as botnet C&C traffic, is easily recognized if it uses known bad domain names, or known bad IP addresses. This is why botnets constantly change… https://www.virusbulletin.com/blog/2017/11/vb2017-paper-beyond-lexical-and-pdns-using-signals-graphs-uncover-online-threats-scale/
Thibault Reuille and Dhia Mahjoub use particle physics to shows clusters of malicious domains.
Thibault Reuille and Dhia Mahjoub use particle physics to shows clusters of malicious domains.In the weeks running up to VB2014 (the 24th Virus Bulletin International Conference),… https://www.virusbulletin.com/blog/2014/08/preview-design-discover-security-analytics-3d-visualization-engine/