Last updated: 5/29/12

Page 1 Times and Schedule Subject to Change

Technical Aspects of Botnets

Wednesday, May 30, 2012

Green Auditorium, National Institute of Standards and Technology

8:30 AM – 9:00 AM Registration

9:00 AM – 9:10 AM Workshop Overview

9:10 AM – 9:20 AM Welcome and Opening Remarks 

Speaker: Donna Dodson

Chief, Computer Security Division and

 Deputy Chief Cybersecurity Advisor

National Institute of Standards and Technology

9:20 AM – 10:35 AM Panel 1: Metrics, Measurements and Reporting

Description: This panel will focus on opportunities and methods for measuring and reporting botnets. 

Panelists will examine what metrics work, how they should be reported, if they need to be 

standardized, where they should be employed, and the major challenges. The panel will discuss

current and future efforts to develop metrics and potential methodologies for evaluating and 

reporting botnets over time.

Moderator: Karen Scarfone, Scarfone Cybersecurity

Patrick Cain, Anti-Phishing Working Group (APWG)

Erik Engebreth, S3 Networks

Alan Paller, SANS (SysAdmin, Audit, Network, Security) Institute

Kevin Sullivan, Microsoft Corporation

10:35 AM – 10:45 AM BREAK

10:45 AM – 12:00 PM Panel 2: Technologies, Tools, and Resources

Description: This panel will explore the various technologies, tools and resources that are needed to 

effectively detect, prevent and remediate botnets. Panel members will examine their 

effectiveness, existing gaps or areas needing improvement, and those characteristics that make 

them most useful. 

Moderator: David Pierce, Department of Defense

David Brockmyer, Intel Corporation

Michael Glenn, Century Link

Patrick Gardner, Symantec Corporation

Phil Porras, Stanford Research Institute (SRI) International

12:00 PM – 1:20 PM LUNCH
Last updated: 5/29/12

Page 2 Times and Schedule Subject to Change

1:20 PM – 1:30 PM Keynote

Speaker: Patrick D. Gallagher

Under Secretary for Standards and Technology and 

 Director of the National Institute of Standards and Technology

1:30 PM – 2:45 PM Panel 3: Current and Future Efforts and Challenges

Description: This panel will discuss several of the efforts in this area. The panel will also address issues and 

challenges related to the prevention, detection, notification, and remediation of botnets. Panel 

members will discuss the impact of botnets, the characteristics and threats that make botnets a 

unique problem, and what it will take to effectively counter them. The panel will focus on the 

environment and ecosystem in which botnets function and the gaps in developing solutions.

Moderator: Zachary Nunn, National Security Staff

Denise Anderson, Financial Services - Information Sharing and Analysis Center 

(FS-ISAC)

Chris Boyer, AT&T

Liesyl Franz, TechAmerica

Michael O’Reirdan, Messaging Anti-Abuse Working Group (MAAWG)

2:45 PM – 4:00 PM Panel 4: Roles and Responsibilities

Description: The botnet ecosystem has many players. In this panel, government and private sector

representatives will share their perspectives on what roles the various stakeholders (e.g. ISPs, 

browser providers, security firms, search engines, users, etc.) play and what their responsibilities 

are or could be. Panelists will discuss trends, gaps, and opportunities in the current environment.

Moderator: Lauren Van Wazer, Office of Science and Technology Policy

Marcus Sachs, Verizon Communications

Ari Schwartz, Department of Commerce

Craig Spiezle, Online Trust Alliance (OTA)

Maxim Weinstein, StopBadware

4:00 PM – 4:15 PM Closing Remark

Speaker: Ari Schwartz

Senior Policy Advisor, Office of the Secretary

Department of Commerce