http://asert.arbornetworks.com/2009/03/atlas20/ A weblog dedicated to educating the community on security threats that matter Wed, 17 Mar 2010 18:21:30 -0400 http://wordpress.org/?v=abc hourly 1 http://asert.arbornetworks.com/2009/03/atlas20/comment-page-1/#comment-199913 meh Thu, 12 Mar 2009 21:43:06 +0000 http://asert.arbornetworks.com/?p=818#comment-199913 ATLAS, AKA, Jose's bullshit meter. Pretty pictures and charts DO make sales though. ATLAS, AKA, Jose’s bullshit meter. Pretty pictures and charts DO make sales though.

]]> http://asert.arbornetworks.com/2009/03/atlas20/comment-page-1/#comment-199723 Stat Shot: Web Traffic Report Wed, 11 Mar 2009 19:45:11 +0000 http://asert.arbornetworks.com/?p=818#comment-199723 [...] and other telecommunications equipment. Arbor passed along some data late yesterday as part of the launch of ATLAS (Active Threat Level Analysis System), its second-generation Internet threat assessment tool. ATLAS [...] [...] and other telecommunications equipment. Arbor passed along some data late yesterday as part of the launch of ATLAS (Active Threat Level Analysis System), its second-generation Internet threat assessment tool. ATLAS [...]

]]> http://asert.arbornetworks.com/2009/03/atlas20/comment-page-1/#comment-199681 Danny McPherson Wed, 11 Mar 2009 13:55:49 +0000 http://asert.arbornetworks.com/?p=818#comment-199681 The Fingerprint Sharing Alliance (FSA) and Active Threat Feed (ATF) only use Network and Transport Layer information at this stage, as they're enabled and "detectable" with flow-based information via Peakflow (and other) systems - some are single stage, some are "compound temporal signatures". The darknet sensor network obviously uses application layer data and collected payloads are analyzed (automated and some manual), instrumented, and indexed in our malware laboratory (AML), enabling abstraction and development of the fingerprints. HTH, -danny The Fingerprint Sharing Alliance (FSA) and Active Threat Feed (ATF) only use Network and Transport Layer information at this stage, as they’re enabled and “detectable” with flow-based information via Peakflow (and other) systems – some are single stage, some are “compound temporal signatures”. The darknet sensor network obviously uses application layer data and collected payloads are analyzed (automated and some manual), instrumented, and indexed in our malware laboratory (AML), enabling abstraction and development of the fingerprints. HTH, -danny

]]> http://asert.arbornetworks.com/2009/03/atlas20/comment-page-1/#comment-199653 Erik Wed, 11 Mar 2009 08:50:19 +0000 http://asert.arbornetworks.com/?p=818#comment-199653 Do the fingerprints rely on application layer data or just flow behaviour? Do the fingerprints rely on application layer data or just flow behaviour?

]]> http://asert.arbornetworks.com/2009/03/atlas20/comment-page-1/#comment-199545 GlasBlog » Blog Archive » ATLAS 2.0 Tue, 10 Mar 2009 21:07:15 +0000 http://asert.arbornetworks.com/?p=818#comment-199545 [...] Networks hat den ATLAS 2.0 veröffentlicht (Bericht). ATLAS (Active Threat Level Analysis System) sammelt Daten aus einer Vielzahl von Quellen und [...] [...] Networks hat den ATLAS 2.0 veröffentlicht (Bericht). ATLAS (Active Threat Level Analysis System) sammelt Daten aus einer Vielzahl von Quellen und [...]

]]>