Setting up Deep Learning environment on Centos 7: Nvidia CUDA, Anaconda, iPython, Keras, Theano and Tensorflow
The following is detailed, tested sequence of steps to setup universal deep learning environment on a minimal install of Centos 7. While Ubuntu is a bit more documented platform – Centos 7 has it’s own [...]
Connecting the Dots: Tracking Identity of DDOS-for-Bitcoins criminal service operator with Maltego, Splunk and Domaintools
This post will demonstrate the ways to investigate and track real identity of an anonymous website operator promoting and selling DDOS attacking services for Bitcoins. I built a system consisting of Maltego visual link analysis tool powered by DomainTools and third party [...]
Shift Card: Bitcoin Visa Debit Card that changes the game
Shift Card Bitcoin subject was on my interest radar for quite a while. Being involved in a number of projects related to modern e-commerce always saw disconnect between bitcoin as a [crypto] currency [...]
Joining Splunk as Senior Product Manager
This summer been full of great news in my personal career development. I've been accepted as a speaker on Fraud/Security subjects at Splunk 2015 yearly users conference to talk about using Splunk in financial/banking industry [...]
Real time detection and automated root cause analysis of web malware, exploits and backdoors with Splunk. Part 2, Detection and alerting.
Continued from Part 1… Adding alert on file system modification events Let’s setup alert that will send email to administrator when some executable script will be modified on Web server under user’s file system space. [...]
Real time detection and automated root cause analysis of web malware, exploits and backdoors with Splunk. Part 1, Architecture.
In this article I’ll demonstrate step by step how to setup Splunk analytics to detect successful known and unknown malware attacks on web hosting systems in real time. In addition the same solution will include [...]
Predicting Unknown Threats: Detecting Human Emotions Through Machine Data Analytics
Wouldn’t it be nice if your SIEM would send a “possible insider threat!” alert when it detects that employee is in fearful, paranoid or even panicky emotional state while trying to access secure, confidential corporate [...]
User Behavior Analysis with Splunk: Detecting Threats and Fraudulent Activity in the Ocean of Behaviors: Part 2 – Detecting Abnormal User Session Velocity and Density
One of my enterprise clients observed that certain class of attacks having a number of distinctive characteristics: attacker who possessed correct user account credentials won’t try to engage into malicious behavior right away. Initial activity [...]