Every time you look around some company or government organization is spouting out some huge number of ?cyber-attacks? to their network every day. By no means is it easy, but could it be that there is little exaggeration of the actuality of the encounters? The first thing you have to do is to determine what constitutes an actual attack. Is it an nMap scan of the network? If a port scan, do you count each packet from the 65,535 ports that it sent to your network 65,535 attacks that you defended against? Maybe it's a little more nefarious and it's a ssh brute force attempt and they perform a hydra attack, does their reporting reflect 1 attack per IP or 1 attack per guess per IP. If you consider the ladder we are looking at potentially be thousands of attacks in mere minutes. Just recently on April 2nd AP reported that, ?Hungary's government says its computer network came under attack from outside the country, temporarily blocking access to several websites.Officials said Saturday that over 62,000 cyberattacks had been registered in a single day, affecting the main government website and that of the Hungarian Academy of Sciences, among others. Could this be a port scan or a couple script kiddies brute-forcing a service? I'll talk about other instances like that and how I defended against large volume attacks on the internet and learned from it at the same time.

Michael Banks is a practicing Cyber Security professional. He currently is employed as an Information Security Consultant at Rendition InfoSec, LLC, a company that provides Penetration Testing, Vulnerability Assessments, Social Engineering, and many other services relating to information security. He recently graduated from Augusta University and achieved a Bachelor of Science degree in Applied Information Systems & Technology with a Minor in Military Science. Michael developed and led Augusta University's first Cyber Defense Team that went to compete in the South East Regional Collegiate Cyber Defense Competition (CCDC)

@4MikeBanks

Back to BSides Augusta 2016 video list