Realtime Analysis and Visualization of the Zeus Botnet

Explore a comprehensive conference talk on real-time analysis and visualization of cybersecurity data presented at BruCON 0x05. Delve into the Anubis Stream and Force platforms, along with the Anubis Cyberfeed system. Learn about stream information processing techniques and the challenges faced in this domain. Discover the technologies employed, including data collection methods utilizing Collectors, Workers, Processors, MongoDB, Redis, and APIs. Understand the limitations and evolution of data collection processes. Examine the development of reports and globe visualizations, and gain insights into additional features like minions. Address portscanning problems and internet status monitoring. Conclude with a Q&A session to clarify any remaining questions on this cutting-edge cybersecurity analysis approach.

Intro
Anubis StreamForce
Anubis Cyberfeed
Stream Information Processing
Challenge
Technologies
Data Collection - Collector
Data Collection - Worker
Data Collection - Processor
Data Collection - MongoDB
Data Collection - Redis
Data Collection - API
Data Collection - Limitations
Data Collection - Evolution
Reports - Evolution
Globe - Evolution
Minions
Extras...
Portscanning problems...
Internet status...
Questions?