Given the constantly evolving attack landscape, there is an ever-increasing strain on the limited number of expert human resources capable of dealing with the security incident. In this webcast we will describe and demonstrate a prototype tool intended to automatically discover and document the actions of an expert security analyst while responding to a particular incident. The system records the various actions by the analyst, identifying the success and failure paths to trace the data transformation from the input received by the analyst to the output generated, documenting the various tools used in the process.
Samir Saklikar leads the Software Advanced Development team of RSA, The Security Division of EMC. As a Principal Technologist in the CTO office, he works on architecting and developing novel solutions and Proof of Concepts around strategic initiatives for RSA such as Cloud Computing, Anti-Threat, Mobile and Identity Security technologies. Prior to RSA, he has worked with Motorola Research Labs and Nokia in the areas of Mobile Security, Web Services Security and Identity solutions.
Josh McCarthy is a recognized expert in network and application security. As a Solutions Architect and 6-year veteran at FireEye, Josh built most of the FireEye technology partner integrations, including Blue Coat, Guidance and Mandiant. His depth of technical expertise and knowledge makes him a valuable resource to work on strategic FireEye customer accounts, including Google, Facebook and many in the financial industry.