BSidesSF

Many presentations about “Big Data” security analysis focus on where to store the data and basic data searches, but where are the analytics? This presentation discusses a handful of “big data” security analytics that are easy to implement and have proven to be useful for detecting intruder activity from readily available data sources. These security analytics surface anomalous and malicious activity using “signatureless” detection techniques.