iPad Pro w/ Magic KB, Surface Go 2, or $350 Off with OnDemand Training - Register Now


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Master the Game of “Who”: Leveraging Network Intelligence and User Activity to Combat Insider Threats

  • Thursday, October 08, 2015 at 11:00 AM EDT (2015-10-08 15:00:00 UTC)
  • Mike Tierney, Vince Berk, Dr. Eric Cole


  • FlowTraq

You can now attend the webcast using your mobile device!



Many organizations focus on keeping bad guys out. But, as the breaches that continue to dominate headlines demonstrate, there's bad behavior - both unintentional and intentional - happening within your borders as well. Whether a breach is caused by carelessness, mischief or major fraud, it's going to cost you.

However, you can master the Game of "Who" once you have the right kind of visibility into all corners of your network, along with the necessary players and tools in place.

Once you've been breached, speed matters. And an intelligent strategy for protecting against insider threats gets you to "whodunit" - as well as what's happening, how it's happening, where it's happening and how to stop it - faster.

Join Dr. Eric Cole as he leads a frank discussion with security experts Vince Berk and Mike Tierney about common inside threat scenarios, the phases of a malicious attack and how a combination of network behavior intelligence and user activity intelligence can give you the power to quickly detect, mitigate and defend against all types of insider attacks.

Speaker Bios

Vince Berk

Vince Berk has nearly two decades of experience defending and securing large networks, and is the designer of the FlowTraq system. His background in high performance computing and secure network engineering ultimately led to the development and commercialization of FlowTraq, the only network security product that can truly scale infinitely. Formerly, Vince led the development of the InterMapper Flows product, which is deployed in thousands of government, university and private sector customer sites. He is a member of the ACM and has a PhD in Computer Science from Leiden University.

Mike Tierney

Mike Tierney is the Chief Operating Officer at SpectorSoft, a leader in user activity monitoring and an innovator in user behavior analytics. SpectorSoft develops software that helps businesses identify and detect insider threats, conduct efficient and accurate investigations, and enhance productivity. Mike is responsible for the day-to-day operations of the company, and has a strong background in product strategy and product management.

Prior to joining SpectorSoft, Mike was the Sr. Director of Product Management for ScriptLogic. Mike's team oversaw a portfolio of solutions for desktop administration and security, identity management, and data access control. Mike also held roles in Operations and Business Development for ScriptLogic. Prior to joining ScriptLogic, Mike worked for information security software provider Authentium.

Dr. Eric Cole

Dr. Cole is an industry-recognized security expert with over 20 years of hands-on experience. Dr. Cole has experience in information technology with a focus on helping customers focus on the right areas of security by building out a dynamic defense. Dr. Cole has a master's degree in computer science from NYIT and a doctorate from Pace University with a concentration in information security. He served as CTO of McAfee and Chief Scientist for Lockheed Martin. Dr. Cole is the author of several books, including Advanced Persistent Threat, Hackers Beware, Hiding in Plain Sight, Network Security Bible 2nd Edition, and Insider Threat. He is the inventor of over 20 patents and is a researcher, writer, and speaker. He is also a member of the Commission on Cyber Security for the 44th President and several executive advisory boards. Dr. Cole is the founder and an executive leader at Secure Anchor Consulting where he provides leading-edge cyber security consulting services, expert witness work, and leads research and development initiatives to advance the state-of-the-art in information systems security. Dr. Cole was the lone inductee into the InfoSec European Hall of Fame in 2014. Dr. Cole is actively involved with the SANS Technology Institute (STI) and is a SANS faculty Fellow and course author who works with students, teaches, and develops and maintains courseware.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.