Andrew Hay

May 21, 2008
by Andrew Hay
0 comments

SANS Tool Talk Webcast: “Log Management: No Longer Optional”

I’ll be presenting a SANS Tool Talk Webcast entitled “Log Management: No Longer Optional” on Tuesday, June 2nd at 1pm EST. About the session: Both network and security professionals agree – a log management solution is no longer optional. It’s … Continue reading

May 21, 2008
by Andrew Hay
1 Comment

10 Commandments of Airplane Etiquette – Part 1 of 2

The following post has nothing to do with security but should serve as a reminder if you’re traveling to a security conference or meeting in the near future: 1) Thou shalt not plan to go to the bathroom (especially Number … Continue reading

May 21, 2008
by Andrew Hay
0 comments

Virtualized Network Security Management (vNSM)

This is a term that I’ve been throwing around for a while now so I thought I’d take the time to define it for everyone. Virtualized Network Security Management (vNSM) The extension of existing Network Security Management (NSM) policies and … Continue reading

May 13, 2008
by Andrew Hay
0 comments

SANS Security Laboratory “Thought Leaders” Article

Stephen Northcutt, of SANS Institute fame, recently recognized me as a Thought Leader in the area of log management. I’m quite humbled to be included with the likes of Dr. Anton Chuvakin, Jeremiah Grossman, and Ron Gula (among others). The … Continue reading

May 12, 2008
by Andrew Hay
0 comments

SANS Toronto 2008 Keynote Roundup

As most of you already know, yesterday I was involved in the SANS Toronto 2008 keynote along with Rob Lee, Bryce Galbraith, Peter Giannoulis, Dave Shackleford, Dr. Johannes Ullrich, Stephen Sims, and Guy Bruneau. This was the first keynote that … Continue reading

May 9, 2008
by Andrew Hay
0 comments

Vote for my Black Hat USA 2008 Presentation!

Hey All, I’ve submitted a presentation/paper for Black Hat USA 2008 and if you are attending I’d really appreciate it if you voted for me. The title of the paper: The Bot Came Back, The Very Next Day. Vote it … Continue reading

May 5, 2008
by Andrew Hay
0 comments

Suggested Blog Reading – Monday May 5th, 2008

I went and played my first round of golf yesterday…and boy am I sore. I probably won’t be posting a SBR next weekend as I’ll be busy at SANS Toronto 2008. If you’re there then please pull me aside and … Continue reading

May 1, 2008
by Andrew Hay
1 Comment

Kraken Botnet Infiltration Triggers Ethics Debate – Quoted in eWeek

I spoke with Ryan Narine last night about my ethical obligations towards shutting down botnets if I had, or had somehow obtained, the power to. I basically equated the prospect to “vigilante justice” and took the moral high-ground on the … Continue reading