Michael Cloppert

Background

About Michael Cloppert

I have been actively employed in various information technology fields since 1997, and in information security since 2001. I have an undergraduate degree in Computer Engineering from the University of Dayton, an MS in Computer Science from The George Washington University, and have received various industry certifications (GCIA, GREM, GCFA, etc.). I have lectured on various information security topics to internal organization-wide IT conferences, SANS, and the annual DC3 Cybercrime Convention. My international work experience consists of training on general information security topics and IDS design/implementation onsite in Egypt, Israel, and India, as well as providing incident response assistance in the Far East. I have been a contributing editor to incident response procedures for two major organizations, and have been involved in digital forensic investigations since 2001 with a variety of tools, most often network-based. I am a co-author of the seminal paper "Intelligence-driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains"(http://bit.ly/killchain) and an original author of SANS FOR578: Cyber Threat Intel Analysis. Specialties: intrusion detection, security information management systems, vulnerability analysis, malware analysis, tool development, digital forensics, advanced information security topics