FloCon 2017 Presentations

• These presentations were given at FloCon 2017, an annual event where attendees discuss the analysis of large volumes of traffic and showcase the next generation of flow-based analysis techniques.

• An API to Filter Network Flows in the Web to Use as Plugin in Web Based Network Visualization Apps May 2017 Author(s): Julio de la Cruz (University of Puerto Rico), Ian Dávila (University of Puerto Rico), Dr. José Ortiz Ubarri (University of Puerto Rico) In this presentation, the authors describe how to create an API that allow system administratiors to manage network flows of data in the web.
• Mothra: A Large-Scale Data Processing Platform for Network Security Analysis May 2017 Author(s): Anthony Cebzanov In this presentation, the author discusses the Mothra security analysis platform.
• DDoS Defense for a Community of Peers May 2017 Author(s): Jem Berkes (Galois), Adam Wick (Galois, Inc.) In this presentation the authors discuss DDoS Defense.
• Netflow Collection and Analysis at Tier 1 Internet Peering May 2017 Author(s): Fred Stringer (AT&T Chief Security Organization) In this presentation, Fred Stringer defines Internet Peering and discusses Netflow Collection and Analysis.
• Backbone Network DRDoS Attack Monitoring and Analysis May 2017 Author(s): Yang Xu, Qitian Su In this presentation, the authors discuss Thread Research, Security Basic Data, including DRDoS montioring, scanner tracking, Bot-Net trac, and other systems.
• I Want Your Flows To Be Lies May 2017 Author(s): Adam Wick (Galois, Inc.) In this presentation, Adam Wick discusses Netflow and problems that could occur on a network.
• Detecting Threats, Not Sandboxes May 2017 Author(s): Blake Anderson (Cisco Systems, Inc.), David McGrew (Cisco Systems, Inc.) In this presentation, the authors discuss detecting threats and characterizing network environment to improve Malware Classification.
• Assessing Targeted Attacks in Incident Response Threat Correlation May 2017 Author(s): Allan Thomas (Looking Glass), Dr. Jamison Day (Looking Glass) In this presentation, the authors assess targeted attacks and advise how automating correlation of threat and network information can help your organization.
• Using Flow for Realtime Traffic Management in 100G Networks May 2017 Author(s): John Gerth (Stanford University), Johan van Reijendam (Stanford University) In this presentation, the authors discuss using flow for realtime traffic and the challenges that can occur.
• Finding the Needle in the Haystack May 2017 Author(s): Jonzy Jones (University of Utah) In this presentation, given at FloCon 2017, Jonzy Jones discusses NetFlows and methods to discover illegitimate traffic.
• SilkWeb – Analyze Silk Data Through API and Javascript Frameworks May 2017 Author(s): Vijay S. Sarvepalli, Dwight S. Beaver In this presentation, the authors describe SilkWeb and how to analyze silk data through API and Javascript frameworks.
• Navigating the Pitfalls and Promises of Network Security Monitoring (NSM) May 2017 Author(s): Dr. Scott Miserendino (BluVector), Michael Gora (BluVector) In this presentation, the authors discuss Network Security Monitoring (NSM).