10 Hottest Sessions At Black Hat Europe 2016

Hottest Briefings: Overall

50 Thousand Needles in 5 Million Haystacks: Understanding Old Malware Tricks to Find New Malware Families | In this 50-minute briefing, Karel Bartos, Lukas Machlica, and Veronica Valeros (all representing Cisco Systems) join forces to dissect and discuss the malware landscape as it is characterized by its rapid and constant evolution. In this talk, the group addresses key challenges related to automatic malware detection in the network traffic: how to detect malware changing its network behavior over time, how to mitigate potential mislabeling of the training data, and how to perform large scale multi-class detection.

Automating Incident Response: Sit Back and Relax, Bots Are Taking Over | Elvis Hovor, and Mohamed El-Sharkawi, both from Accenture, will take advantage of their 50-minute session to illustrate the value of automating functions and processes within incident response. The duo will present their research which describes their approach to leveraging orchestration of cyber architectures and open-source IR tools to help security operations center (SOC) teams that typically encounter large swaths of security alerts with a high level of frequency, have a (relatively mature) IR process, and are seeking to adopt a more proactive detection, triage, and response capability.