SC Congress – Day 2 – 1:20pm – “Detecting modern malware in your environment”

Day 2 – Wed June 12 2013:
1:20pm – “Detecting modern malware in your environment”, by Iain Patterson, information security officer, Trillium Health Partners

This presentation offered a high level survey of how to mitigate, detect, handle and remove malware from computer systems. The bulk of the presentation was fairly high level, discussing process, concepts and best practices.

The last couple of slides were quite valuable, as they identified the tools that are helpful in detecting and mitigating malware. Iain offered two sets of tools:

The “Security on a budget” list:

• Security Onion
• IPTables
• Splunk
• Syslog Server
• Clam AV
• EMET

Iain also offered a great list of bigger budget tools. Unfortunately, I couldn’t get the list. I’ll be watching for the slides, at which point I’ll update my list.

Ian’s final slide highlighted some great tools for malware analysis:

• Anubis
• Comodo
• Eureka
• Jotti
• Jsunpack
• ThreatExpert
• VirusTotal
• Wepawet

Very valuable resources!