Grey Space Capabilities: Boosting Anomaly Detection

This session will provide an overview of the advantages that grey space analysis can deliver in the enhancement of the health and security of an organization’s devices, networks and data. The presentation will cover implementation methodologies for utilizing internal network traffic metadata and commercial data feeds from multiple curated and proprietary commercial data sources to characterize network traffic. Such data, when properly analyzed, can provide tipping and cueing for anomalous activity.

The presentation will also cover high-level examples of the utilization of grey space capabilities, and how they can optimize and enrich other elements of an organization’s cybersecurity. Lastly, the audience will walk away with examples of innovative grey space implementation strategies that can support and enhance network characterization and anomaly detection.

SUMMARY: This session is a three-part presentation that consists of a scene-setter for the national imperative to secure critical infrastructure, a brief overview of the U.S. Strategic Command Center of Excellence, and a discussion of grey space capabilities to enhance packet analysis, network characterization, anomaly detection, monitoring quality of service, and malicious activity detection in support of our nation's most critical networks.