Network Monitoring SIG News 2008

Around 60 attendees joined the 5th NM-SIG meeting 'Monitoring and Detection of Fast-Flux Service Networks'. The NM-SIG had invited 3 speakers to talk about this topic, namely David Watson(The Honeynet Project), Jose Nazario(Arbor Networks) and Christian Gorecki(University of Mannheim). David gave an introduction on Fast-Flux Service Networks. Jose talked about Fast-Flux detection via Arbor's project ATLAS. And Christian presented an approach to automate detection of Fast-Flux with certain metrics. The last part of the meeting was called 'Bring your demo'. Three people gave a short demo of network monitoring tools. Florian Weimer explained the approach of passive DNS replication, which also can be used to track Fast-Flux domains. Tillmann Werner gave a demo of 'Nebula', an intrusion signature generator. And Piotr Kijewski showed HoneySpider Network, a client honeypot solution. The feedback of this meeting was very positive and we hope to plan more of these meetings in the near future.

During the 20th annual FIRST conference in Vancouver (June 22-27, 2008), the Network Monitoring Special Interest Group (NM-SIG) is planning a meeting. During this meeting we would like to focus on the theme:

"Monitoring and Detection of Fast-Flux Service Networks"

We are looking for speakers who are interested to give a presentation about their tools and experiences regarding monitoring and detection of Fast-Flux Service Networks. If you are interested to give a presentation or if you know anyone who might be interesting to invite, you can the NM-SIG Chair Carol Overes (carol.overes@govcert.nl).