<div dir="ltr">I humbly point you at my BH presentation from 2004 on anomaly detection and granular automated response: <a href="https://www.youtube.com/watch?v=YTy8z7Wcc0M">https://www.youtube.com/watch?v=YTy8z7Wcc0M</a><div>
<br></div><div>From my perspective Dave is right on. Sadly, not enough of us have been living the long view and leading our organizations along that path. But some have. </div><div><br></div><div>Detection without response is useless. Response requires reasoning, and that is what scares many people about automated response. Some degree of reasoning can be automated, and that is really the next frontier. We have come a long way from 2004, but this isn't stuff you can buy in a box. </div>
<div><br></div><div>Cheers,</div><div>Dom</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Aug 12, 2014 at 1:29 PM, Andre Gironda <span dir="ltr"><<a href="mailto:andre@operations.net" target="_blank">andre@operations.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class=""><p dir="ltr"><br>
On Aug 12, 2014 12:05 PM, "Dave Aitel" <<a href="mailto:dave@immunityinc.com" target="_blank">dave@immunityinc.com</a>> wrote:<br>
> <a href="https://vimeo.com/102641000" target="_blank">https://vimeo.com/102641000</a><br>
><br>
> I did a dry run of a talk I did last week and it's now up for your<br>
> viewing pleasure/pain. :></p>
</div><p dir="ltr">SWARM = Speed + Intelligence? "Just add additional VMs to the micro-cloud"</p>
<p dir="ltr">services-consulting-overview.shtml :<br>
Consulting Overview, App Vuln Analysis, Process Review, Source Code Analysis, Exploit Development and Reverse Engineering, Consultants, etc</p>
<p dir="ltr">Sorry, Dave, I can't find the products or services on your website that cover apoptosis, data destruction, minimization of important irregular assets, sub-microsecond level reactive response, or that provide an anomaly-detection harness.</p>
<p dir="ltr">Am I missing something? Do I have the right URL?</p>
<p dir="ltr">Warmest regards,<br>
Andre</p>
<p dir="ltr">P.S. I like this talk, and we know you have a vision, man. Don't let me get to you. What I do want to hear more about, though, is how do we get to your vision -- you know, I am really not understanding how your vision precludes intelligence, analysis, and actively going after adversaries du jour<br>
</p>
<br>_______________________________________________<br>
Dailydave mailing list<br>
<a href="mailto:Dailydave@lists.immunityinc.com">Dailydave@lists.immunityinc.com</a><br>
<a href="https://lists.immunityinc.com/mailman/listinfo/dailydave" target="_blank">https://lists.immunityinc.com/mailman/listinfo/dailydave</a><br>
<br></blockquote></div><br></div>