• Header Web Conf19 Finale
            
  • Conf19 Testa
            

Connecting the future    

GARR Conference is the annual meeting of users, operators and managers of the Italian national education and research network aimed at sharing experiences and comments on the use of the network as a tool for research, training and culture, in different contexts and disciplines.


GARR Conference 2019 - Video


Thematics     

Thematics    

At the hearth of this years’ conferenceare the new IT challenges in multidisciplinary research: from cybersecurity to artificial intelligence, from data preservation to their reuse, from education to open science.

These are topics of interest for the many communities that are part of the GARR network and are becoming more and more interlinked and multidisciplinary. The conference will be an opportunity to present success stories of innovation and topics for discussion for the world of academia, research, education, health and humanities.

4 giugno 2019

Gianni Amato

CERT-PA
https://www.cert-pa.it/

Dovinci - Cyber threat intelligence platform

Gianni Amato è un ricercatore Senior in ambito Cyber Security presso il CERT-PA / AGID. In passato ha lavorato come consulente per diverse compagnie, è specializzato in incident response, malware analysis, penetration test e cyber threat intelligence.


Gianni Amato is a Senior Cyber Security Researcher at CERT-PA / AGID. In the past he worked as a consultant for several companies, he specializes in incident response, malware analysis, penetration tests and cyber threat intelligence.

SESSIONE 3. Cybersecurity

Dovinci - Cyber threat intelligence platform

Dovinci è una piattaforma di Cyber Threat Intelligence sviluppata da Gianni Amato e in uso presso il CERT-PA dal 2015. Nativamente progettato per individuare in rete la presenza online di exploit e vulnerabilità rilevanti, databreach, campagne malware, mobilitazioni anarchiche e operazioni in ambito hacktivism, consente di monitorare, rilevare e allertare in near-real time su eventi o segnali riguardanti minacce cyber provenienti da fonti OSINT, CLOSINT o da informazioni archiviati localmente. L'infrastruttura supporta architetture distribuite e lavora in modo del tutto trasparente alle attività degli analisti. Dovinci acquisisce costantemente nuovi contenuti dalle fonti configurate, li indicizza e li verifica singolarmente seguendo regole ad-hoc per individuare quei segnali che potrebbero rappresentare una minaccia per la constituency del CERT-PA. Le informazioni acquisite nel corso degli anni dalle sorgenti precedentemente configurate, unitamente alle meta informazioni che ogni dato acquisito si porta dietro, contribuiscono ad arrichire la knowledge base di Dovinci a benificio di indagini e ricerche storiche mirate o semplicemente correlate a nuovi eventi.


Dovinci - Cyber threat intelligence platform

Dovinci is a Cyber ​​Threat Intelligence platform developed by Gianni Amato and in use at CERT-PA since 2015. Natively designed to find online the presence of relevant exploits and vulnerabilities, databreach, malware campaigns, anarchist mobilizations and hacktivism operations, allows to monitor, detect and alert in near-real time on events or signals concerning cyber threats coming from OSINT, CLOSINT sources or locally stored information. The infrastructure supports distributed architectures and works transparently to analysts activities. Dovinci constantly acquires new contents from the configured sources, indexes them and verifies them individually following ad-hoc rules to identify those signals that could represent a threat to the constituency of the CERT-PA. The information acquired over the years from the previously configured sources, together with the meta information that each acquired data carries with it, contributes to enriching the knowledge base of Dovinci for the benefit of investigations and historical research aimed at or simply related to new events.

 

Sponsor

Huawei
Main Sponsor

TIM
Fortinet