Paweł Pawliński
Paweł Pawliński is an expert at CERT.PL. His job experience includes data analysis, threat tracking, automation and coordinating international activities.
Session
Network telescopes capture vast amounts of unsolicited Internet traffic, much of which is often dismissed as background noise. In reality, this traffic contains valuable information about Internet-wide scanning, botnet activity, exploitation attempts, misconfigurations, data leaks, DDoS activity, and more.
The workshop will introduce the approaches used by CIRCL and NASK/CERT.PL to extract useful information from network telescope, while also leaving ample time for independent experimentation. Participants will leave with a practical understanding of how to turn seemingly meaningless packets into observations of large-scale Internet phenomena and actionable threat intelligence.