Aktaion V2: Open Source Tool For Microbehavior Based Exploit Detection

Red Team Village

Aktaion V2 is a python3 project for detecting exploits (and more generally attack behaviors). The project is meant to be a learning/teaching

Class Format: Speaker will be on video and audio, as well as chatting(texting) in Discord. You will only be able to ask questions in Discord (not via voice to the speaker) So you must signup for discord - and join the Red Team Village Discord Server, and the Hands-on-labs channel during the training time.<ul><li>Speakers: Joseph Zadeh</li><li>Streaming Video: https://youtu.be/0oGSu32zzQA</li><li>Discord for Q&amp;A: https://RedTeamVillage.io/discord</li></ul>Presentation Information------------------------Bio: Principal Security Research Engineer, Splunk&#x27;s Threat Research Team. Joseph has spent a career in Silicon Valley building behavioral intrusion detection technologies at scale for a variety of use cases some times to help enterprise security as well as the fight against human trafficking. He enjoys working on Blue/Purple team research projects that combine security, artificial intelligence and distributed systems.Presentation InformationTitle: Aktaion V2 Training - Hands on with open source ML for Exploit DetectionAccompanying Slides for the Hands on TrainingThis 2-hour training session will help the attendees to increase their understanding of how artificial intelligence can be used (with limitations) to build behavior based detection&#x27;s. We will use the open source project Aktaion to discuss the internals of how this detection is built using standard python libraries for packet analysis and machine learning.Aktaion is a machine learning open source &amp; active defense (orchestration) prototype. The tool focuses on the detection of Ransomware based on machine learning techniques, independent of static-based signatures. The tool has been mentioned and featured in may respected community publications and research, and in years past presented at a variety of Blackhat Arsenal events. AKTAION v2 is the second iteration or port of the project from the original Java into Python3.The training will cover:<ul><li> Building an end to end intrusion detection workflow for detecting exploit behavior</li><li> Analysis of exploit attack data for meaningful encoding of statistics and behaviors to build detections with:</li><li> Examples of orchestration workflow tying in an upstream action into a detection event</li><li> The Do&#x27;s and Don&#x27;ts of using Machine Learning (and complex software paradigms) for Cybersecurity use cases</li></ul>The expected audience is network and security engineers and architects, or anyone with an interest in hacking and building tools that use behavior for defensive use cases.Students are required to use their own laptop and latest versions of python/pip tested and working. It is recommended to use PyCharm Community Edition and have a working version of Bash or Zsh installed if you want to follow along with the training examples interactively.Class Format Speaker will be on video and audio, as well as chatting over Discord. You will only be able to ask questions in Discord (not via voice to the speaker) So you must signup for discord - and join the Red Team Village Discord Server, and the Hands-on-labs channel here: https://RedTeamVillage.io/discordRequired Materials:A Linux (Ubuntu) or MacOS machine running Python 3.7 (virutalenv) along with the dependencies listed in the project requirements file here: <a href="https://github.com/jzadeh/aktaion2/blob/master/requirements.txt" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://github.com/jzadeh/aktaion2/blob/master/requirements.txt</a>Question and answers, Some extra tips:Join the Red Team Village Discord Channel for technical discussions, support and Q&amp;A here: -&gt; https://RedTeamVillage.io/discordClass Format: 1. You will receive a separate email on 5/6/2020 with details on how to join this training, so make sure your EMAIL is valid and that you are watching for the invite2. Speaker will be on video and audio, as well as chatting(texting) in Discord. 3. You will only be able to ask questions in Discord (not via voice to the speaker) 4. So you must signup for discord - and join the Red Team Village Discord Server, and the #Hands-on-labs channel. here: https://RedTeamVillage.io/discord

Aktaion V2: Open Source Tool For Microbehavior Based Exploit Detection

More events from Red Team Village

Discover more events from Red Team Village, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.

Aktaion V2: Open Source Tool For Microbehavior Based Exploit Detection

More events from Red Team Village

Discover more events from Red Team Village, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.