Cleaning Up the Internet with Scumblr and Sketchy

No ratings

Presented at CSAWthreads 2014 by

Recently the Netflix Cloud Security team added several open-source tools, Scumblr and Sketchy, to the Netflix Open Source Software family. These applications fit into an approach to security we call "proactive security." Practicing proactive security means setting up a solid foundation to build from and being quick to identify and respond to potential issues. We believe that proactive security controls can help ensure issues occur less often and are identified faster. In this talk we will discuss these concepts and how the new tools we have developed that fit into this strategy. We will discuss examples such as how we monitor sites like Pastebin, Google, and Twitter for sensitive information, database leaks or even planned attacks with Scumblr and Sketchy. Attendees will leave this talk with strategies and open source tools they can use in their own organizations to battle complex security issues and instill confidence in consumers when real security issues or even falsified issues are reported to the masses. Andy Hoernecke is a Senior Application Security Engineer at Netflix. Prior to Netflix, Andy built and led the Application Security program for Sears Online. Andy has also taught Master's level courses in Application Security at DePaul University. He earned a Master's Degree in Computer Engineering and Information Assurance at Iowa State University and is actively involved with Information Security efforts through multiple organizations. Andy's approach to security centers around finding practical solutions to long-standing, difficult problems. He couples his experience in Security with his interest in automation and data visualization to provide unique insight into today's biggest security challenges.