BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Talks.cam//talks.cam.ac.uk//
X-WR-CALNAME:Talks.cam
BEGIN:VEVENT
SUMMARY:Network Security Monitoring - Richard Bejtlich\, TaoSecurity
DTSTART:20060519T150000Z
DTEND:20060519T160000Z
UID:TALK4951@talks.cam.ac.uk
CONTACT:Stephen Lewis
DESCRIPTION:This presentation will introduce the tenets of network securit
 y monitoring (NSM) as defined and applied by Richard Bejtlich. Attendees w
 ill see how Bejtlich approaches incident detection and response by using s
 tatistical\, session\, full content\, and alert data. The open source NSM 
 suite Sguil (www.sguil.net) will be demonstrated via a free VMware image t
 hat attendees can try. Network-centric incident response and forensics iss
 ues will also be covered. Expect a lively discussion!
LOCATION:Room FW11\, Computer Laboratory\, William Gates Building
END:VEVENT
END:VCALENDAR