PaIRS: Point of contact and Incident Response System – Finding bad actors without looking at content

No ratings

Presented at Lockdown2019 2019 by

Joel Rosenblatt

The PaIRS system uses Netflow data to discover compromised machines on the University network without looking at packet content. It looks at the behavior of the systems and can determine if a machine has been…