Unlocking Security at Scale - How Threat Intelligence Providers and Cloud Networks Collaborate

Explore the critical collaboration between threat intelligence providers and major cloud networks in this 49-minute conference talk from NANOG. Discover how modern threat intelligence organizations like Spamhaus have evolved beyond traditional blocklists to provide actionable insights, advanced detection techniques, and real-time data that enable networks to rapidly identify and mitigate malicious activity. Learn about the technical, operational, and policy challenges involved in fostering effective partnerships between threat intelligence providers and large-scale network operators. Examine how real-time data exchange and ongoing collaboration enhance threat response efficiency, prevent abuse, and protect users at scale. Gain insights from industry experts Matthew Stith from Spamhaus and Paul Vixie from AWS Security as they discuss best practices for building trust and maintaining effective communication channels. Review a real-world case study demonstrating how ongoing dialogue and data sharing between threat intelligence providers and major networks translate into meaningful improvements in internet security infrastructure.