Menu

IOCs Are Dead—Long Live IOCs!

  • Friday, March 4, 2016 | 11:20 AM – 12:10 PM | West | Room: 2006

View all Sessions

Indicators of Compromise were meant to solve the failures of signature-based detection tools. Yet today’s array of IOC standards, feeds and products haven’t impeded attackers, and most intel is shared in flat lists of hashes, IPs and strings. This session will explore why IOCs haven’t raised the bar, how to better utilize brittle IOCs and how to use intrinsic network data to craft better IOCs.

Participants

This document was retrieved from http://www.rsaconference.com/events/us16/agenda/sessions/2398/iocs-are-dead-long-live-iocs on Tue, 28 Mar 2017 21:34:08 -0400.
© 2017 EMC Corporation. All rights reserved.