nbad

The first part in this series covers the history of Network Behavioral Anomaly Detection (NBAD.)

How to parse the claims vendors make in APT detection.

Video presentation from Lawrence Orans of Gartner, describing how Network Behavioral Analysis (NBA/NBAD) can detect advanced, targeted threats.

Comparing how physical security caught the shoe bomber to how we go about catching network threats.

Pseudo-code proof that network behavioral anomaly detection (NBAD) of threats is the superior evolution of signature based detection.

In this second installment we look at the difference between signature and behavioral detection schools.