Andrei Cotaie
Technical Lead, Security Intelligence & Engineering Adobe
BIOGRAPHY
Andrei Cotaie is a Security Engineer specialized in Incident Response. Currently working for Adobe’s Security Coordination Center, Andrei made the transition from the public to the private sector almost 7 years ago. A big fan of automation and machine learning enthusiast, Andrei spends most of his time involved in monitoring and threat hunting projects, always trying to identify the latest unconventional attacks.
Hunting for LoLs (a ML Living of the Land Classifier)
Living of the Land is not a brand-new concept. The knowledge and resources have been out there for several years now. And still, LoL is one of the preferred approaches when we are speaking about highly skilled attackers or security professionals. Two main reasons why:
1. Experts tend not to reinvent the wheel
2. Attackers like to keep a low profile/footprint (no random binaries/scripts on the disk)
The talk focuses on detecting attacker activity/Living of the Land commands using Machine Learning, for both Linux and Windows systems.
The presentation covers why it is hard to detect LoLs, the feature engineering used in our approach, comparison between different classifiers as well as hands-on experience using our library and integration into one of our previous open-source projects called One-Stop-Anomaly Shop (OSAS – https://github.com/adobe/OSAS). Additionally, we also discuss why OSAS and the LoL classifier are complementary solutions and how evading one will lead to being detected by the other.
This presentation is co-presented with Tiberiu Boros, Data Scientist / Machine Learning Engineer at Adobe.
Are you the next cyber security superstar?
If you are passionate about an information security topic or you have strong technical skills developing researches on your own, you should definitely Apply at Call for Papers. By submitting you will have the chance to showcase your work to +2000 attendees.
Other speakers joining this year
Calin Badea
Data Protection Program Manager Garrett Motion
Andra Zaharia
Content marketer with cybersecurity expertise
Cristian Pațachia-Sultănoiu
Development & Innovation Manager Orange
Ready for this year's presentations?
By registering you will unlock access to 60+ speakers and two full days with cyber security news & showcases from worldwide leaders.
COMPETITIONS
Sponsors & Partners
They help us make this conference possible.
POWERED BY
Orange Business is a key division of Orange Romania, specializing in providing cutting-edge communication, technology, and digital transformation solutions tailored to businesses of all sizes. With a strong emphasis on innovation, Orange Business offers a wide array of services, including high-speed connectivity, cloud computing, cybersecurity, Internet of Things (IoT), and managed services. Their mission is to support organizations in their digital transformation journey by enhancing operational efficiency, improving customer experience, and maintaining a competitive edge in a rapidly changing digital environment.
Orange Business combines deep technological expertise with a customer-centric approach, ensuring that each solution is customized to meet the specific needs of their clients. Their commitment to innovation and excellence makes them a trusted partner for businesses seeking to thrive in the digital age.