Скачать или смотреть ICMP: A world beyond ping

Many people are aware of Internet Control Message Protocol (ICMP) or at least some common tools that use ICMP, like Ping. ICMP is used to report errors but can be used for so much more. Were you aware that ICMP can be used for covert tunnels, exfiltrating data, and may be leaking information about your internal systems? Are you monitoring ICMP?

Join Andy Laman for this webcast where he dives into ICMP, look at expected and unexpected types of ICMP messages, and ways of monitoring ICMP to better defend our networks.

Andrew Laman is the founder and principal consultant at A4 InfoSec, an independent consulting firm with services focusing on monitoring, detection, and incident response. Andy has more than 25 years of information technology and security experience in multiple industries. He has held lead security positions in Fortune 500 and several global companies. Andy is a course contributor and teaches SEC503: Intrusion Detection In-Depth, for the SANS Institute. In addition to the CISSP, Andy holds multiple GIAC certifications including the prestigious GIAC Security Expert (GSE #142) certification as well as multiple other industry certifications.

More on Andy Laman: sans.org/profiles/andrew-laman
More on SEC503: Intrusion Detection In-Depth: sans.org/sec503