Andrei Bozeanu is a cybersecurity researcher with more than 30 years of experience both in defensive and offensive fields of operations, his work being summed up in a start-up named Dekeneas, which provides detection for browser based attacks, which grew to be some of the most elusive and dangerous cyber attacks of our time, with previously unknown vulnerabilities in most browsers, mobile or desktop, being discovered in the wild every month. Andrei Bozeanu has an active role in providing counter intelligence regarding cyber threats, not only for browser attacks but also for IoT, ICS or generic attacks, through the Dekeneas Honeynet which generates a custom tailored threat intelligence feed. Also, for the past 10 years, Andrei has been a cybersecurity researcher for Romanian National CERT (CERT-RO), and now works as a cybersecurity researcher and threat analyst for Romanian National Cybersecurity Directorate.

Deceptive Ops & Honeynet Design

The technologies behind this Dekeneas solution, namely the low and medium-interaction honeypots and the darknet monitoring sensors allows us to better understand the regional and sectorial cyberthreats landscape and to observe new actors, new tactics and new threats.

Leveraging our advanced big-data correlation and enrichment capabilities, we are thus able to generate and deliver complex and context-aware cyber threat intelligence feeds with superior granularity on business verticals and regional activity.

These CTI (Cyber Threat Intelligence) Feeds are particularly useful in Security Operations Centers environments as it can offer foresight for threat prevention and threat mitigation, and are of great use in CTI sharing scenarios through interconnection with state-agents such as DNSC and SRI-Cyberint.

This presentation is co-presented with Cristian Patachia-Sultanoiu, Development & Innovation Manager Orange.