Note: Our current website is at www.zeek.org. This website is unmaintained and contains outdated information.

Security is BroCon

BroCon ’17 offers the Bro community a chance to meet face-to-face, share new ideas, and better understand and secure our networks. The conference is composed of presentations from members of the community and the Bro Development team.

Location and Dates

BroCon ’17 will occur on Tuesday morning, September 12th — Thursday at noon, September 14th, at the National Center for Supercomputing Applications in Urbana, Illinois (map). Each morning the conference will begin with breakfast at 8:00am at NCSA. Tuesday’s and Wednesday’s agendas end at 5:00pm with a welcome event planned Tuesday night. Thursday’s agenda is shortened to noon to give remote attendees a head start on traveling home.

Sponsorship

BroCon ’17 is accepting sponsorship funds. Donations to The Bro Project are managed by Software Freedom Conservancy.

To learn more about supporting Bro or its events, email us at info@bro.org

The Bro Project thanks the following sponsors:

100 Gig

10 Gig

Registration

Registration has ended. Early bird registration fee for BroCon is $100 and expires on Sunday July 30th at 11:59 pm (Central time). Registration after that time is $150.

Attendance at BroCon includes breakfasts and lunches at NCSA.

Refunds

Full refunds, less a $30 processing fee, will be issued up to 50 days after registration. Unfortunately we are unable to issue any refunds beyond 50 days after a registration. Four weeks prior to the start date of the conference, we will be unable to offer any refunds.

Agenda

Note: The agenda is subject to change.

Tuesday, September 12

00 a.m. Breakfast and Registration
00 a.m. Welcome and Introduction — Adam Slagell, Bro/NCSA (Slides) (Video)
30 a.m. Keynote Address: What’s the Use? Searching for Meaning in 20 Years of Security Research — Michael Bailey, Associate Professor of Electrical and Computer Engineering, UIUC (Video)
15 a.m. Break
45 a.m. SSL Research with Bro — Johanna Amann, Bro/ICSI/Corelight (Slides)
15 a.m. A Bro Primer — Adam Pumphrey, Bricata (Slides) (Video)
00 p.m. Lunch at NCSA atrium
30 p.m. Data Analysis, Machine Learning, Bro, and You! Brian Wylie, Kitware (Slides) (Video)
15 p.m. Justin Azoff’s laBROtory — Justin Azoff, Bro/NCSA (Video)
Links: Bro Doctor / Scan plugin / Darknet plugin / Bro Clickhouse / Intel sharing
00 p.m. Break
30 p.m. Using awk to analyze Bro logs — Mark Krenz, Indiana University (Slides) (Video)
15 p.m. Unconstrained Endpoint Security System (UEPtSS) — Fatema Bannat Wala, University of Delaware (Slides) (Video)
00 p.m. Day 1 ends
30 p.m.  Reception
Hors d’oeuvre and drink refreshments served in NCSA atrium. Sponsored by our corporate sponsors.

Wednesday, September 13

00 a.m. Breakfast
00 a.m. Using Bro to Hunt Persistent Threats — Benjamin Klimkowski (Slides) (Video)
45 a.m. The Bro Package Manager and You — Seth Hall, Bro/Corelight (Slides) (Video)
15 a.m. Break
45 a.m. Protocol Parser Development to Inspect Malware Command and Control Traffic — Kevin McMahon & Mark Fernandez, MITRE Corp. (Slides) (Video)
30 a.m. Following the Packets: A Walk Through Bro’s Internal Processing Pipeline — Robin Sommer, Bro/Corelight/ICSI (Slides) (Video)
00 p.m. Lunch in lobby
30 p.m. Detecting Credential Spear-phishing Attacks at LBNL — Aashish Sharma, Berkeley Lab (Slides) (Video)
15 p.m. Lightning Talks — Presenters: Presenters: Aashish Sharma, Jon Zeolla, Michael Shirk, Fatema Bannat Wala, Nick Buraglio, Leo Linsky, Aaron Eppert, and Jan Grashöfer. (Slides) (Video)
00 p.m. Break
30 p.m. Spark and Bro: When Bro-Cut Won’t Cut It — Eric Dull, Joseph Mosby, & Brian Sacash; Deloitte & Touche
15 p.m. Running Bro in the Cloud at Scale — Alan Commike, Reservoir Labs (Slides) (Video)
00 p.m. Day 2 ends

Thursday, September 14

00 a.m. Breakfast
00 a.m. The Intelligence Framework Update — Jan Grashöfer, Karlsruhe Institute of Technology (Slides) (Video)
45 a.m. Broadmap — Robin Sommer, Bro/Corelight/ICSI; & Seth Hall, Bro/Corelight (Video)
15 a.m. Break
45 a.m. Travails of running Bro IDS on the Embedded Platform — Vijay Pasapuleti, Acumera
30 a.m. Bro Panel discussion (Video)
30 p.m. Lunch, Day 3 ends
Boxed lunch is provided

Wireless

Connect to UIUC’s guest wireless, instructions posted here.

REN-ISAC Regional Meeting

Are you an active member in REN-ISAC and attending BroCon? REN-ISAC is hosting a regional meeting on Monday September 11th, the day before BroCon begins.

More information about the event can be found at the REN-ISAC event page

REN-ISAC is a members-only community, this event is not open to the public.

Hotel Information

The Hampton Inn is one block north of NCSA on University Ave.

Hampton Inn
1200 W University Ave
Urbana, IL 61801
Front desk: 217-337-1100
Rate: $129/night plus taxes (Government rate: $91/night + taxes)
Block of rooms expire: Monday, August 14th.

Transportation Information

There are two regional airports near Urbana-Champaign: Willard Airport (CMI) and Central Illinois Regional Airport (BMI) in Bloomington. The Bloomington airport has more flight options but is a 45-minute drive west of Champaign. For those who prefer to drive from Chicago or Indianapolis the drive is approximately two-and-a-half hours from either city.

Parking

Paid parking is available in the B4 lot directly north of NCSA (on University Ave, enter the lot on Matthews or Goodwin Ave). Be sure to park at a metered spot. Do not park in the un-metered spots, those are rental spots for students and staff. NCSA and The BroCon Events Team are not responsible for parking violations. Registration to BroCon does not include free parking.

Parking meters offer a mobile payment option using pay by phone

Code of Conduct

BroCon ’17 is dedicated to providing a harassment-free conference experience for everyone. We do not tolerate harassment of conference participants in any form. Conference participants violating these rules may be sanctioned or expelled from the conference, without a refund, at the discretion of the conference organizers.