iPad Air 2, Samsung Galaxy Tab A, or $350 Off with SANS Online Training Right Now!

San Francisco 2012

San Francisco, CA | Mon, Jul 30, 2012 - Mon, Aug 6, 2012
This event is over,
but there are more training opportunities.

The Advanced Persistent Threat You Have: Google Chrome

  • Todd Heberlein
  • Thursday, August 2nd, 7:15pm - 8:15pm

The Advanced Persistent Threat (APT) has become the watchword for cyber espionage laying waste to our national and economic security. Do you have APTs inside your organization right now? How can you be confident of your answer? I argue that you probably already have a benign APT inside your organization, and your ability to detect, analyze, and understand this benign APTs actions will tell you whether you have a chance to do the same for malicious APTs. That benign APT is Google's software update system. I pose key questions that your organization should be able to answer about this activity. I present a summary of my findings and a somewhat detailed analysis of Google's update activity. To determine if your organization is prepared for a modern threat, you should consider a similar exercise with the data you currently collect and the tools you use to analyze that data. If you fail with the Google APT, you will probably fail with a real APT.


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
Additional Sessions
Session Speaker Type
GIAC Program Overview Dr. Eric Cole Special Events
SANS Technology Institute Brief Dr. Eric Cole Special Events
All Your Hash are Belong to Us: Targeting Windows Password Hashes for Penetration Seth Misenar SANS@Night
Spear Phishing and Targeted Attacks Stephen Sims SANS@Night
Assessing Deception Mike Murr SANS@Night
Monday, July 30
Session Speaker Time Type
General Session - Welcome to SANS Dr. Eric Cole Monday, July 30th, 8:15am - 8:45am Special Events
Why Do Organizations Get Compromised? Dr. Eric Cole Monday, July 30th, 7:15pm - 9:15pm Special Events
Tuesday, July 31
Session Speaker Time Type
Getting to the Root of Highly Targeted Rootkits Jeremy Flessing, HBGary, Inc. Tuesday, July 31st, 7:15pm - 8:15pm SANS@Night
Thursday, August 2
Session Speaker Time Type
The Advanced Persistent Threat You Have: Google Chrome Todd Heberlein Thursday, August 2nd, 7:15pm - 8:15pm SANS@Night