FIRST 2019: Defending the (Edinburgh) Castle

Olivier van der Toorn

Last week was the FIRST conference in Edinburgh. TIDE was presenting a talk on
“Proactive Threat Detection”. The idea we presented at FIRST was, since a
proactive approach works well in the field of DNS, that we need to expand on
proactive detection of threats. It fit well with the theme of the conference,
Defending the Castle. Through proactive threat detection defenders are able to
mount a defense against upcoming attacks rather than getting notified when the
castle is already on fire.

The response of the FIRST community was very positive. In discussions after the
talk we came up with ideas on how to use our results that benefits the
community of defenders at large.

The presentation slides can be found here: pdf

Below you can see Olivier presenting this idea to the community of FIRST.

Thanks to Gijs Peeters for the picture.