Tweet #BroCon2018
Security is BroCon
BroCon is the most important community event for users, developers, incident responders, threat hunters and architects who rely on the open-source Bro network security monitor as a critical element in their security stack. Registration page: https://www.brocon2018.com
Conference Hosting
With Bro’s NSF funding winding down, it has become more challenging for the project to organize large events. The Bro leadership team has therefore asked Corelight to host BroCon this year, in lieu of a financial sponsorship. We are considering Corelight’s support for the event an in-kind donation to the project, with benefits equivalent to what’s coming with a standard 100G BroCon sponsorship. Although Corelight is hosting the event, any surplus funds will revert to the Bro project as a donation. The Bro Leadership Team remains responsible for the BroCon program.
To help with planning, execution and logistics, Corelight has retained ConnellyWorks, a Washington DC-based event management firm with deep experience in putting on world class events in the region.
EXCLUSIVE RECEPTION SPONSOR
40 Gig Sponsors
10 Gig Sponsors
MEDIA SPONSORS
Supporting Partners
Agenda
Wednesday, October 10, 2018
8:00 AM - 9:00 AM | Breakfast and Registration
9:00 AM - 9:30 AM | Welcome and Introduction | Keith Lehigh, Principal Security Engineer, Indiana University | (slides)
9:30 AM - 10:15 AM | Keynote: Challenges for Network Monitoring — Marcus J. Ranum | (slides) | (video)
10:15 AM - 10:45 AM | Break
10:45 AM - 11:15 AM | DHCP Overhaul | Seth Hall, Corelight | (abstract) | (slides) | (video)
11:15 AM - 12:00 PM | The Ever Increasing Need to Monitor SMB Traffic | Barry Weymes, Security Engineer, Aramco Overseas Company | (abstract)
12:00 PM - 1:30 PM Lunch
1:30 PM - 2:15 PM | Is Weird really weird? | Fatema Bannat Wala, Security Engineer, University of Delaware | (abstract) | (slides) | (video)
2:15 PM - 3:00 PM | A Tutorial on Writing Bro Plugins | Robin Sommer, Corelight/ICSI | (abstract) | (slides) | (video)
3:00 PM - 3:30 PM | Break
3:30 PM - 4:15 PM | Analyzing Active Long Running Connections with Bro | Joe Johnson, Software Engineer, ICEBRG (recently acquired by Gigamon) | (abstract) | (slides) | (video)
4:15 PM - 5:00 PM | Fingerprinting Encrypted Channels with Bro for High Fidelity Detection | John Althouse and Jeff Atkinson | (abstract) | (slides) | (video)
5:00 PM - 6:30 PM | Welcome Reception Sponsored By Bricata
Thursday, October 11, 2018
8:00 AM - 9:00 AM | Breakfast
9:00 AM - 9:45 AM | Managing Bro Deployments at Scale Using DevOps Technologies | Daniel Lohin, Principal Security Engineer, Sealing Technologies, Inc. and Ed Sealing, President and CEO, Sealing Technologies, Inc. | (abstract) | (slides) | (video)
9:45 AM - 10:15 AM | Community Updates | Vern Paxson, Chief Scientist, Corelight | (video)
10:15 AM - 10:45 AM | Break
10:45 AM - 11:30 AM | Bro scripts - 101 to 595 in 45 mins | Aashish Sharma, Cyber Security Staff, Lawrence Berkeley National Lab | (abstract) | (slides) | (video)
11:30 AM - 12:00 PM | Bro Configuration Framework | Johanna Amann, ICSI
12:00 PM - 1:30 PM | Lunch
1:30 PM - 2:15 PM | Lightning Talks | (slides) | (slides) | (slides) | (slides) | (slides) | (slides) | (slides) | (video)
2:15 PM - 3:00 PM | Adaptive and Automated Analysis with Broker | Matthias Vallentin, Tenzir and Dominik Charousset, Tenzir | (abstract) | (slides) | (video)
3:00 PM - 3:30 PM | Break
3:30 PM - 4:15 PM | Justin Azoff’s LaBROtory | Justin Azoff, Security Engineer, NCSA/Bro | (slides) | (video)
4:15 PM - 4:35 PM | The Ins and Outs of Developing a new Bro protocol analyzer in BinPAC | Alan Commike, Reservoir Labs | (abstract) | (video)
4:35 PM - 5:00 PM | Bro in the Financial Services Sector: Developing a strategy for Threat Hunting (Clone) | Threat Hunting Team at Morgan Stanley | (abstract)
Friday, October 12, 2018
8:00 AM - 9:00 AM | Breakfast
9:00 AM - 9:45 AM | Network Data Enrichment for Analysis and Hunting | Adam Pumphrey, Director of Professional Services, Bricata | (abstract) | (slides) | (video)
9:45 AM - 10:15 AM | Broadmap | (slides) | (video)
10:15 AM - 10:45 AM | Break
10:45 AM - 11:30 AM | Gaining Insight from Bro Logs through Pattern Discovery with Tensor Decompositions | James Ezick, Reservoir Labs | (abstract)
11:30 AM - 12:30 PM | Panel Talk | (video)
12:30 PM - 1:00 PM | Lunch
