PATRIOT: Perceiving Advanced Threats by Rogue Internet Of Things

Presented at BSidesDC 2017, Oct. 8, 2017, 2:30 p.m. (50 minutes)

The Internet of Things is expected to turn the security world upside down with cheap, low security devices that have no ability to be managed or monitored natively. The only way to wrap any kind of security around these devices is by way of network monitoring and using advanced behavior analytics and machine learning tools to perceive threats.

Enter PATRIOT, a solution to the problem of determining whether your IoT device has gone rogue. It consists of three components, IoT identification, IoT Behavior Analysis and IoT Threat Detection. PATRIOT analyzes network session metadata collected by Bro sensors and uses machine learning extensively to automate the analysis and provide a quick detection and response system for attacks by compromised IoT devices.


Presenters:

  • Ajit Thyagarajan - CTO at Atomic Mole LLC
    Ajit Thyagarajan is an innovative and passionate technologist who explores challenging technology opportunities. He is currently CTO at Atomic Mole, a cybersecurity company developing a simple and effective security solution for the Enterprise. Until recently, he held multiple Director positions at Fidelis Cybersecurity. Prior to Fidelis, he was heavily involved with Internet Protocols and building fast routers. He was instrumental in the early development and adoption of IP multicast and contributed several changes to the BSD kernel. He also worked on several enhancements to NTP (Network Time Protocol) during his graduate student days. Ajit has presented at various security conferences, the most recent being BSides DC 2016, BroCon 2016 and BSides San Francisco 2016. Ajit currently mentors several cybersecurity start-ups as part of Mach37, a Virginia based Cyber security incubator.

Links:

Tags:

Similar Presentations: