Steve Chan
Biographical Sketch
Before joining the Outreach, Software, and Programming Group, Stephen Chan worked in the Networking, Security and Servers Group, led the effort to rollout production Grid Services across NERSC and was previously the lead for the Parallel Distributed Systems Facility (PDSF). Steve joined the Lab after working at several Silicon Valley Internet startups, Carnegie-Mellon University, Stanford University, Javasoft and Lucasfilm. Steve earned a B.S. in Information and Decision Systems at Carnegie-Mellon University and a Masters of Information Management Systems from UC Berkeley.
Stephen currently works on authentication infrastructure, web applications and web infrastructure and web security related projects.
Presentations:
Conference Papers
Scott Campbell, Steve Chan and Jason Lee, “Detection of Fast Flux Service Networks”, Australasian Information Security Conference 2011, January 17, 2011,
Fast Flux Service Networks (FFSN) utilize high availability server techniques for malware distribution. FFSNs are similar to commercial content distribution networks (CDN), such as Akamai, in terms of size, scope, and business model, serving as an outsourced content delivery service for clients. Using an analysis of DNS traffic, we derive a sequential hypothesis testing algorithm based entirely on traffic characteristics and dynamic white listing to provide real time detection of FFDNs in live traffic. We improve on existing work, providing faster and more accurate detection of FFSNs. We also identify a category of hosts not addressed in previous detectors - Open Content Distribution Networks (OCDN) that share many of the characteristics of FFSNs
