DATA SCIENCE LIEGE MEETUP #9

Cet exposé se focalisera sur comment le partage de données et d'analyses entre pairs de confiance et une nouvelle forme de décentralisation permettent des démarches plus efficientes en termes de sécurité.

The collection of millions of endpoint and network events in modern IT environments opens up great opportunities for the security analyst to perform Threat Hunting activities in search of adversary activity. However, the Threat Hunter faces several challenges: how do we create a baseline of “normal” or “expected” activity out of millions (or billions!) of events? How do we deal with false positives? Etc.

In this talk, we will introduce a set of common challenges in analyzing huge amounts of security events, and the techniques we can leverage in order to spot outlier events, which could indicate an attack.

Attendees can expect demos and realistic Threat Hunting examples!

This talk will demonstrate use cases how sensitive/private data can be easily discovered and used/abused by criminals to undermine individual privacy or corporate confidentiality.

Security Consultant/Penetration Tester by day and Security Researcher by night with over 5 years experience in the field. My current role as a senior security governance consultant is to perform complex security assessments involving infrastructure, web application and red-team exercises.

Le Professeur Legay animera un échange avec les orateurs du meetup et partagera ses impressions sur la thématique pour clôturer le meetup.

Axel Legay is Professor at UC Louvain. He also used to work at Inria as team leader in cyber security. He received his Ph.D. in Computer Science from the University of Liège, Belgium. His main research interests are in formal verification, testing, and cyber security . He is a founder and major contributor of statistical model checking (a statistical variant of model checking effectively used in industry), proveline (product lines analysis) , and malware analysis. He wrote more than 300 publications and he is a referee for top journals and conferences in those areas; He wrote several open source tools, and he has been institution PI for more than 30 projects.