Steve Schmalz, Field CTO, RSA Federal at RSA, The Security Division of EMC.  Malware is making greater use of encryption to avoid detection. Most packet capture tools can parse network traffic, determine encryption algorithms, and identify certain encryption software. This talk will review the use of encryption by malware, detail the capability of packet capture tools to identify encrypted traffic, discuss the role of trusted cryptographic modules to enrich information available to these tools, and speculate on a broader role for trusted cryptographic modules in identifying malware.

General Technology Track