Name: Trust in Tech -An Empirical Assessment of EDR Systems against APT Attack Vectors
Start: 2021-07-27T18:00:00+02:00
End: 2021-07-27T21:00:00+02:00

Nearly a week ago Dr. Constantinos Patsakis and George Karantzas published a paper where they researched on how to assess an Endpoint Detection and Response Systems against Advanced Persistent Threats Attack Vectors. In this session we will talk about the evaluation of EDR and their findings.

Advanced persistent threats pose a significant challenge for blue teams as they apply various attacks over prolonged periods, impeding event correlation and their detection. In this work, we leverage various diverse attack scenarios to assess the efficacy of EDRs against detecting and preventing APTs. Our results indicate that there is still a lot of room for improvement as state-of-the-art EDRs fail to prevent and log the bulk of the attacks that are reported in this work. Additionally, we discuss methods to tamper with the telemetry providers of EDRs, allowing an adversary to perform a more stealth attack.

ITPirate

Trust in Tech Cologne

Technology

System Administration

Software Development

Microsoft Windows

Web Technology

Cloud Computing

Cybersecurity

Microsoft Azure

Black Hat Hacking

Microsoft

Windows

Web Application Security

The Secret

White Hat Hacking

Trust in Tech -An Empirical Assessment of EDR Systems against APT Attack Vectors

Online event

Teilen

Trust in Tech Cologne

Trust in Tech -An Empirical Assessment of EDR Systems against APT Attack Vectors

Trust in Tech Cologne

Details

Mitglieder interessieren sich auch für