[109885] in North American Network Operators' Group
Re: Security Intelligence [Was: Re: Netblock reassigned from Chile
daemon@ATHENA.MIT.EDU (Randy Bush)
Sat Dec 13 03:47:16 2008
Date: Sat, 13 Dec 2008 17:46:59 +0900
From: Randy Bush <randy@psg.com>
To: Paul Ferguson <fergdawgster@gmail.com>
In-Reply-To: <6cd462c00812130029k7b08b8d5rd92c68dc9550a94e@mail.gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
> If folks think that people are not "doing" massive correlation of criminal
> activity on the Internet, they would be mistaken.
engineers judge by the results. and, unfortunately, we can read them in
the ny times.
though some recent papers sure make interesting reading. just picking
on one particular cs researcher
http://www-cse.ucsd.edu/~savage/papers/CCS08Conversion.pdf
http://www-cse.ucsd.edu/~savage/papers/login08.pdf
http://www-cse.ucsd.edu/~savage/papers/LEETHeisenbot08.pdf
the last being particularly interesting in the domain of being able to
*accurately* isolate evil.
randy
