MISP
/
misp-training
mirror of https://github.com/MISP/misp-training
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [gmsa] Improved layout

master
mokaddem 2020-07-16 13:09:15 +02:00
parent d704700860
commit 78411e2247
1 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
x.11-gsma/content.tex
View File

@ -37,7 +37,9 @@ The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven
\item CIRCL leads the development of the Open Source MISP threat intelligence platform which is used by many military or intelligence communities, private companies, financial sector, National CERTs and LEAs globally. \item CIRCL leads the development of the Open Source MISP threat intelligence platform which is used by many military or intelligence communities, private companies, financial sector, National CERTs and LEAs globally.
\item {\bf CIRCL runs multiple large MISP communities performing active daily threat-intelligence sharing}. \item {\bf CIRCL runs multiple large MISP communities performing active daily threat-intelligence sharing}.
\end{itemize} \end{itemize}
\begin{center}
\includegraphics{en_cef.png} \includegraphics{en_cef.png}
\end{center}
\end{frame} \end{frame}
\begin{frame} \begin{frame}
@ -142,7 +144,9 @@ The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven
\begin{frame} \begin{frame}
\frametitle{Correlation features: a tool for analysts} \frametitle{Correlation features: a tool for analysts}
\begin{center}
\includegraphics[scale=0.18]{screenshots/campaign.png} \includegraphics[scale=0.18]{screenshots/campaign.png}
\end{center}
\begin{itemize} \begin{itemize}
\item To {\bf corroborate a finding} (e.g. is this the same campaign?), {\bf reinforce an analysis} (e.g. do other analysts have the same hypothesis?), {\bf confirm a specific aspect} (e.g. are the sinkhole IP addresses used for one campaign?) or just find if this {\bf threat is new or unknown in your community}. \item To {\bf corroborate a finding} (e.g. is this the same campaign?), {\bf reinforce an analysis} (e.g. do other analysts have the same hypothesis?), {\bf confirm a specific aspect} (e.g. are the sinkhole IP addresses used for one campaign?) or just find if this {\bf threat is new or unknown in your community}.
\end{itemize} \end{itemize}
@ -192,7 +196,9 @@ The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven
\item Quick benefit without the obligation to contribute. \item Quick benefit without the obligation to contribute.
\item Low barrier access to get acquainted to the system. \item Low barrier access to get acquainted to the system.
\end{itemize} \end{itemize}
\begin{center}
\includegraphics[scale=0.9]{misp-distributed.pdf} \includegraphics[scale=0.9]{misp-distributed.pdf}
\end{center}
\end{frame} \end{frame}
@ -250,7 +256,7 @@ The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven
\end{frame} \end{frame}
\begin{frame} \begin{frame}
\frametitle{GSMA specific taxonomies} \frametitle{GSMA specific {\bf taxonomies}}
\begin{itemize} \begin{itemize}
\item \texttt{gsma-attack-category} \item \texttt{gsma-attack-category}
\begin{itemize} \begin{itemize}
@ -269,7 +275,7 @@ The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven
\begin{frame} \begin{frame}
\frametitle{Telco usefull galaxies: Bhadra Framework} \frametitle{Telco usefull {\bf galaxies}: Bhadra Framework}
Bhadra is a threat modeling framework for mobile communication systems\footnote{https://arxiv.org/pdf/2005.05110.pdf} Bhadra is a threat modeling framework for mobile communication systems\footnote{https://arxiv.org/pdf/2005.05110.pdf}
\includegraphics[width=1.05\linewidth]{screenshots/bhadra-matrix.png} \includegraphics[width=1.05\linewidth]{screenshots/bhadra-matrix.png}
\end{frame} \end{frame}
@ -285,7 +291,7 @@ The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven
\item \texttt{short-message-service} \item \texttt{short-message-service}
\begin{itemize} \begin{itemize}
\item \item Short Message Service (SMS) object template describing one or more SMS message
\item \texttt{body}, \texttt{from}, \texttt{to}, \texttt{received-date}, ... \item \texttt{body}, \texttt{from}, \texttt{to}, \texttt{received-date}, ...
\end{itemize} \end{itemize}