At FloCon 2013, FlowTraq will share how individuals’ unique patterns of behavior related to tasks and interests can aid in network security.
(PRWEB) December 24, 2012
ProQSys, provider of scalable network security software for enterprise environments, today announces Alexander Barsamian, FlowTraq R&D lead, will present a breakout discussion and NetFlow-based demonstration on identifying network users using flow-based behavioral fingerprinting at FloCon 2013 (January 7-10, 2013, Albuquerque, New Mexico). He will present on Wednesday, January 9, 2013, 1:30-2:00 p.m.
FloCon 2013 is a network security conference that provides a forum for operational network analysts, tool developers, researchers, and other parties interested in the analysis of large volumes of traffic to display the next generation of flow-based analysis techniques. This year's conference will focus on the challenges of "Analysis at Scale." In large network environments, flow (an abstraction of network traffic in which packets are aggregated by common attributes over time) data helps to provide a scalable way of seeing the big picture, as well as a streamlined platform for highlighting patterns of malicious behavior over time.
FlowTraq is a network security software product that uses network flow records to provide unified security, monitoring, and forensics. Barsamian will provide attendees of the breakout session and demonstration a greater understanding of flow-based behavior fingerprinting. Having developed the only commercially available solution that scales beyond 100Gbps without the need to sample or aggregate data, Barsamian will share insights on:
- What a user fingerprint is and how individuals’ unique patterns of behavior related to tasks and interests can aid in network security improvements
- How to make active, adaptive fingerprinting available to network administrators, including a review of data and processing requirements, and ease of implementation (technology- and policy-related)
- What makes NetFlow’s properties – privacy, speed, and scalability – attractive to analysts
- The methodologies and parameters for implementing and compiling flow-based behavioral fingerprinting
- The anticipated short-term and long-term gains from implementing NetFlow-based fingerprinting
About the Presenter
Alexander (Alex) Barsamian, FlowTraq R&D lead – Barsamian is a software developer and project leader at FlowTraq. He has been involved in network security and flow research efforts since 2001, first at Institute for Security Technology Studies (ISTS) at Dartmouth College, subsequently as a graduate student, and currently at FlowTraq. His research has included flow-based methods for host characterization, anomaly detection, and botnet recognition; he has also worked on software compartmentalization and attestation, and on process query systems. Barsamian earned a B.A. in Computer Science with a minor in mathematics, and an M.S. in engineering, both from Dartmouth College.
About FlowTraq by ProQSys
FlowTraq is a network security software product that uses network flow records to provide unified security, monitoring, and forensics. It is the only commercially available solution that scales beyond 100Gbps without the need to sample or aggregate data. As a result, FlowTraq's robust behavioral fingerprints trigger few false alarms, which mean less time lost investigating non-incidents. FlowTraq can be deployed stand-alone or in a cluster, enabling it to offer its forensically accurate analytics at any bandwidth level. It is designed to complement and improve existing network security operations.
Founded in 2004, ProQSys develops and markets software solutions that monitor and analyze network security and performance to provide deep insight, high visibility, and valuable understanding of complex network infrastructures. With FlowTraq, users gain an unprecedented level of network situational awareness that facilitates fast and easy monitoring, quick security analysis, and complete forensic recall of any traffic that crosses their network, thus reducing organizational risk. ProQSys software solutions include FlowTraq, FlowTraq Lite, Flow Exporter, and InterMapper Flows. ProQSys has over 2,600 customers worldwide, including Fortune 500 companies, ISPs, Managed Service Providers, government, schools, and universities. ProQSys is privately held and headquartered in New Hampshire. For more information, visit http://www.flowtraq.com/corporate/.