Early detection of compromise

Nick Savvides 2004

This session will provide a practical guide in determining whether a networked computer has been compromised by a hacker or script kiddie. You will also be told what steps to take once evidence of a compromise has been found. Both Windows and Linux computers will be covered in this session. Root kits, common exploits and other techniques used by the intruders will also be discussed.

Presentation slides

About Nick Savvides

Nick Savvides is the Security Operations and Security Manager for VeriSign Australia. He is responsible for the operation of VeriSign's regional security operations centre (SOC) in Melbourne as well as the physical, electronic and personnel security for the region. His duties involve managing a team of security analysts servicing managed security services customers across the globe, acting as the escalation point for critical issues as well as ensuring that VeriSign operations follow best practice security guidelines and meet all VeriSign, ASIO T4 and Australian Federal Government Highly Protected requirements.

Nick brings over 10 years IT experience to VeriSign, with strong skills in security, Linux and high performance computing. Prior to joining VeriSign, Nick was IT Security Administrator at The University of Melbourne, where he managed the vulnerability assessment service responsible for performing security audits on University departments. Nick was also the primary IT security advisor with central IT at the University.