Putting on the MITN: The Evolution of Threat Intelligence at U-M

Since last year's presentation, we have matured and expanded the use of threat intelligence at the University of Michigan and have created Michigan Intelligence for Threat Negation (MITN). We will discuss our latest experiences with effective threat intelligence collection, sharing and generation efforts both at U-M and within the Big Ten Academic Alliance. We'll demonstrate the value of generating local threat intelligence data with Modern Honey Network (MHN) honeypots and log data from systems and security devices, and how this has not only amplified the value of existing security protections for U-M IT infrastructure but also provided value to peer institutions.

Outcomes: Learn how threat intelligence can improve organizational security posture * Learn easy and cost-effective ways to use threat intelligence in existing security systems * Learn how to share threat intelligence with peers in an automated way