Jasper Bongertz
Sessions
Are you at Sharkfest for the first time? Then this session is for you. We'll explain how the conference works and what's probably different from other conference you may have been at. You'll learn about Packet Doctors, the evening events, the onsite WCA exam, and what the developer den is. The goal is to make sure you don't feel you missed out on something at the end of the conference because you didn't know how it worked.
The Wireshark Certified Analyst exam is not an easy certification to take, especially if your knowledge about the details of the TCP protocol is somewhat shaky. In this talk we'll take a look at the aspects mentioned in the WCA curriculum and discuss them together. The goal is to make sure you understand what you need to bring to the exam and help you identify the areas where you might have to improve your skill analyzing TCP to achieve the WCA status.
It's not easy to spot attacks in network packets, mostly because there's so many of them (packets, that is), resulting in the Signal-to-Noise ratio is extremely high. But there are also additional challenges, like encryption or attackers simply using protocols that administrators use themselves. We'll take a look at a number of real world scenarios and learn about various attack patterns and how to find/recognize them.