Incident Response at Scale

Speaker: Heather Adkins

On January 12, 2010 Google announced it had detected - and taken measures to address -  a sophisticated, targeted attack against its corporate infrastructure, and at least twenty other large companies, that resulted in the theft of intellectual property.  This news sent shockwaves through the security community. It heightened the awareness of threats that have long faced governments and the defense industrial base, but rarely unrelated industries.

This talk will provide a brief overview of this attack and how the Incident Response team at Google met the challenge.  It will address issues of effectiveness and efficiency in light of the scalability problems associated with traditional response methodologies.  The constraints of global cooperation within the community will also be discussed.  Google believes that discussing these important topics should be a priority for the member organizations that make up FIRST.