CERT.br Presentations

2026

• CERT.br/NIC.br Incident Management Activities (2.6 MB)
  Watch the YouTube video
  Classification of AI Incidents, USP's Institute of Advanced Studies (IEA/USP) Chair on Responsible AI, September 2026, São Paulo, SP, BR
  
  
• Ransomware Best Practices: When the Best is the Enemy of the Good (14.4 MB)
  National CSIRTs Meeting 2026, June 2026, Denver, CO, US
  
  
• CERT.br Threat Feeds for National CSIRTs (1.6 MB)
  National CSIRTs Meeting 2026, June 2026, Denver, CO, US
  
  
• CERT.br Threat Feeds for AS Owners and National CSIRTs (1.3 MB)
  LAC-CSIRTs LACNIC 45, May 2026, Panama City, Panama
  
  
• CERT.br Mission and Services (9.7 MB)
  LAC-CSIRTs LACNIC 45, May 2026, Panama City, Panama
  
  
• Cyber Stability Conference 2026:
  Session 1 – The digital revolution: Key technological turning points
  Panelists: Dr. Cristine Hoepers, General Manager, CERT.br; Dr. Serge Droz, Board Member, Forum for Incident Response and Security Teams (FIRST).
  Moderated by Moliehi Makumane, Researcher, Security and Technology, UNIDIR
  Watch the YouTube video
  Cyber Stability Conference 2026, United Nations Institute for Disarmament Research, May 2026, Geneva, Switzerland
  
  
• The New Feed on The Block: CERT.br feeds via IntelMQ (1.8 MB)
  Joint TF-CSIRT & FIRST Regional Symposium Europe, February 2026, Jerez de la Frontera, Spain
  
  

2025

• Ransomware Attack Prevention, Detection, and Response: The Essentials That Can Make a Difference (8.4 MB)
  2025 FIRST Regional Symposium Latin America & Caribbean, October 2025, San Salvador, El Salvador
  
  
• Fighting Malicious SEO Campaigns at a National Level — the Case of Brazil (4.1 MB)
  Underground Economy 25, September 2025, Strasbourg, FR
  
  
• Fighting Malicious SEO Campaigns at a National Level — the Case of Brazil (4.1 MB)
  National CSIRTs Meeting 2025, June 2025, Copenhagen, DK
  
  
• Anatomy of Malicious Search Engine Optimization (SEO) Campaigns in Brazil (1.8 MB)
  LAC-CSIRTs LACNIC 43, May 2025, São Paulo/SP, Brazil
  
  

2024

• Fighting Phishing and DNS Hijacking on a National Level (607 KB)
  M3AAWG 62nd General Meeting, October 2024, Toronto, CA
  
  
• CERT.br (3 MB)
  LAC-CSIRTs Meeting, October 2024, Asunción, PY
  
  
• Panel: Cybersecurity in the G20
  YouTube Video
  Digital Policies in the G20 Webinar Series, FGV Direito Rio, June 2024, Online
  
  
• Lightning Talk: Miscellaneous Updates from CERT.br (2.8 MB)
  National CSIRTs Meeting 2024, June 2024, Fukuoka, JP
  
  
• Challenges, Pros and Cons of Processing Data Feeds to Notify Constituents on a National Level (1 MB)
  National CSIRTs Meeting 2024, June 2024, Fukuoka, JP
  
  
• Regional Updates Panel: Initiatives in the Americas and in Latin America & the Caribbean (1.5 MB)
  OCSC24 - Open Cyber Security Conference, OpenCSIRT Foundation and FIRST, February 2024, Santa Cruz de Tenerife, ES
  
  

2023

• Positive Security Awareness? We Got You Covered! (10.8 MB)
  FIRST Conference 2023 Lightning Talks, June 2023, Montreal, CA
  
  
• Panel: No One Likes to be Excluded: What Is the Role of War Exclusions in Cyber Insurance?
  YouTube Video
  FIRST Conference 2023, June 2023, Montreal, CA
  
  
• Security Awareness Initiatives in Brazil: Current Status & Lessons Learned from More than 20 Years Spreading the Word about Internet Security (13.5 MB)
  National CSIRTs Meeting 2023, June 2023, Montreal, CA
  
  

2022

• Traffic Light Protocol (TLP) 2.0 (1.3 MB)
  M3AAWG 56th General Meeting, October 2022, Brooklyn, NY, US
  
  
• TLP 2.0: What's New in the Standard and How it Impacts Incident Handling and Threat Information Sharing (3.4 MB)
  LAC-CSIRTs / LACNIC 38, October 2022, Santa Cruz de La Sierra, Bolivia
  
  

2021

• Panel: The Lack of Privacy and Behavioral Control in a Surveillance Economy: Is Another World Possible? (9.8 MB)
  Watch the video on YouTube
  SECOMU 2021 - 51º Seminar of Computing in the University, CSBC 2021 - XLI Congress of the Brazilian Computer Society, july 2021, On-line
  
  

2020

• Outreach and Education Experiences in Brazil (19.5 MB)
  15th Annual Technical Meeting for CSIRTs with National Responsibility, December 2020, On-line
  
  
• IGF 2020 NRIs Collaborative Session: Cybersecurity local policies and standards
  Watch the video on YouTube
  IGF 2020, November 2020, On-line
  
  
• Panel: International Security and Emergency Response Cooperation
  Watch the video on the event website
  EU Cyber Forum 2020, September de 2020, Online
  
  
• Incidents and Trends in Brazil (23.7 MB)
  ITU 2020 Global CyberDrill - Regional Dialog for the America Region, September 2020, Online
  
  
• Incident Handling Amid a Pandemic: Now What? (15.4 MB)
  LAC-CSIRTs, LACNIC 33, May 2020, Online Event
  
  
• CERT.br Team Introduction (6.9 MB)
  TF-CSIRT Meeting, January 2020, Málaga, Spain
  
  

2019

• DNS Abuse and Misuse (8.2 MB)
  Watch the video on YouTube
  OF48 Open Forum on DNS abuse and misuse, IGF 2019, November 2019, Berlin, Germany
  
  
• Establishment of CERTs/CSIRTs to Promote Resilience and Stability in Cyberspace (2.2 MB)
  Brazil-EU Cyber Consultations - Preventing Conflict in Cyberspace, November 2019, Rio de Janeiro, RJ, Brazil
  
  
• FIRST CSIRT Services Framework (7.6 MB)
  LAC-CSIRTs Meeting, LACNIC 32 / LACNOG 2019, October 2019, Panama City, Panama
  
  
• CSIRTs and LEAs Cooperation (11.6 MB)
  First Forum for Law Enforcement Agencies (LEAs), LACNIC 32 / LACNOG 2019, October 2019, Panama City, Panama
  
  
• CSIRTs and Collaboration (7.3 MB)
  GFCE Triple-I Capacity Building | The Internet Infrastructure Security Day, August 2019, La Paz, Bolivia
  
  
• National Program "For a More Secure Internet" (8 MB)
  GFCE Triple-I Capacity Building | The Internet Infrastructure Security Day, August 2019, La Paz, Bolivia
  
  
• New National Initiatives (19.2 MB)
  14th Annual Technical Meeting for CSIRTs with National Responsibility, June 2019, Edinburgh, UK
  
  

2018

• WS 50 Whois collected, disclosed and protected: CERTs viewpoint
  Watch the YouTube video
  Internet Governance Forum 2018, October 2018, Paris, FR
  
  
• From Professionals to Policy Makers: Challenges and Opportunities in Educating about Cybersecurity and Incident Handling (15.3 MB)
  LAC-CSIRTs & FIRST Technical Colloquium, September 2018, Rosario, Argentina
  
  
• From Professionals to Policy Makers: Challenges and Opportunities in Educating about Cybersecurity and Incident Handling (14 MB)
  13th Annual Technical Meeting for CSIRTs with National Responsibility, June 2018, Kuala Lumpur, Malaysia
  
  
• Evolution of the Scenario of Incidents in Brazil (26.1 MB)
  OAS Regional Meeting of CSIRTs of the Americas, May 2018, Brasília, DF, Brazil
  
  
• Cybersecurity & Privacy: Information Security (5.2 MB)
  VIII NIC.br Annual Workshop on Survey Methodology, April 2018, São Paulo, SP, Brazil
  
  

2017

• CERT.br Team Update: New Awareness Materials (17.6 MB)
  2017 Annual Meeting of CSIRTs with National Responsibility, June 2017, San Juan, Puerto Rico
  
  
• Notable trends in Brazil: BGP hijacking for financial fraud and the evolution of Mirai (1.3 MB)
  2017 Annual Meeting of CSIRTs with National Responsibility, June 2017, San Juan, Puerto Rico
  
  
• Cybersecurity and Online Trust in 10 Years? - Two Possible Scenarios (1.2 MB)
  LACNIC 27 Opening Panel ­ The Internet of the Future: Its Evolution over the Next 10 Years, LACNIC 27, May 2017, Foz do Iguaçu, PR, Brazil
  
  
• Notable trends in Brazil: BGP Hijacking for financial fraud and the evolution of Mirai (1.3 MB)
  12th LAC-CSIRTs - Latin American and Caribbean Meeting of CSIRTs, May 2017, Foz do Iguaçu, PR, Brazil
  
  

2016

• IoT Security: Old problems, New challenges (13 MB)
  Computer Security Conferences 2016, UNAM, December 2016, Mexico City, MX
  
  
• Lessons Learned from the Rio2016 Summer Olympic Games (1.7 MB)
  2016 San José FIRST Technical Colloquium, September 2016, San José, CR
  
  
• DDoS Atacks: Detection, Analysis and Mitigation (1.8 MB)
  10th LAC-CSIRTs - Latin American and Caribbean Meeting of CSIRTs, May 2016, Havana, CU
  
  
• Incident Handling in High Profile International Events: Lessons Learned and the Road Ahead (1.9 MB)
  FIRST/TF-CSIRT Technical Colloquium, January 2016, Prague, CZ
  
  

2015

• The Trials and Tribulations of Remediating Compromised CPEs, CCTVs and Other IoTs (3.5 MB)
  2015 Bogotá FIRST Technical Colloquium, September 2015, Bogotá, CO
  
  
• The Trials and Tribulations of Dealing with Compromised CPEs, CCTVs and Other IoTs (1.3 MB)
  2015 Annual Meeting of CSIRTs with National Responsibility, June 2015, Berlin, DE
  
  
• CERT.br Use of Honeypots for Network Monitoring and Incident Response (2.7 MB)
  Internet Architecture Board (IAB) Coordinating Attack Response at Internet Scale (CARIS) Workshop, June 2015, Berlin, DE
  
  
• Overview of Phishing and Malware Attacks in Brazil (2.1 MB)
  APWG eCrime 2015, May 2015, Barcelona, ES
  
  
• Compromised CPEs and Rogue DNS servers: attacks and response challenges (1.3 MB)
  8th LAC-CSIRTs - Latin American and Caribbean Meeting of CSIRTs, May 2015, Lima, PE
  
  

2014

• Incident Handling Coordination and Cooperation: Lessons Learned from the 2014 World Cup (1.4 MB)
  2014 FIRST Technical Colloquium, October 2014, Santiago, CL
  
  
• Report on the Activities of the IGF Best Practice Forum (BPF) for: Establishing and supporting CERTs for Internet security (2.3 MB)
  2014 FIRST Technical Colloquium, October 2014, Santiago, CL
  
  
• A Multistakeholder Effort to Reduce Spam -- The Case of Brazil (1.7 MB)
  ISOC Latin America Spam Webinar, Internet Society, august 2014, Webinar
  
  
• A Multistakeholder Effort to Reduce Spam ­ The Case of Brazil (1.7 MB)
  Combating Spam Workshop, WSIS+10 High Level Event, june 2014, Geneva, CH
  
  

2013

• Cybersecurity, Cybercrime, Cyberwar, Cyberespionage... can the Internet community make the situation better? (195 KB)
  LACNIC 20 / LACNOG 2013, October 2013, Willemstad, Curaçao
  
  
• "Irresponsibility at Scale" from a CERT point of view (1.2 MB)
  IGF 2013 - 8th Internet Governance Forum Meeting, October 2013, Bali, Indonesia
  
  
• Port 25 Management in Brazil: A Multistakeholder Effort to Reduce Direct Delivery from End User Networks (2.0 MB)
  IGF 2013 - 8th Internet Governance Forum Meeting, October 2013, Bali, Indonesia
  
  
• Port 25 Management in Brazil: A Multistakeholder Effort to Reduce Direct Delivery from End User Networks (3.4 MB)
  Joint CITEL, ITU and the Internet Society Workshop on Combating Spam, October 2013, Mendoza, Argentina
  
  
• Port 25 Management in Brazil or how Brazil left the CBL Top 10 (2.6 MB)
  2013 Annual Meeting of CSIRTs with National Responsibility, June 2013, Bangkok, Thailand
  
  
• DNS Amplification Attacks as a DDoS Tool and Mitigation Techniques (853 KB)
  4th Latin American and Caribbean Meeting of CSIRTs, May 2013, Medellin, Colombia
  
  
• Port 25 Management in Brazil: Overview and Results (2.5 MB)
  4th Latin American and Caribbean Meeting of CSIRTs, May 2013, Medellin, Colombia
  
  
• Anti-botnet Initiatives (770 KB)
  APWG CeCOS VII, April 2013, Buenos Aires, Argentina
  
  

2012

• Internet Security Challenges and the Role of CERT.br (2.4 MB)
  Brasil-Canada 3.0, December 2012, João Pessoa, PB, Brazil
  
  
• Use of Honeypots for Network Monitoring and Situational Awareness (2.2 MB)
  Buenos Aires 2012 FIRST TC, August de 2012, Buenos Aires, Argentina
  
  
• Phishing and Banking Trojan Cases Affecting Brazil (3.9 MB)
  2012 FIRST Symposium, March 2012, São Paulo, SP, Brazil
  
  
• honeyTARG Chapter Activities (2.9 MB)
  2012 Honeynet Project Security Workshop, March 2012, SF Bay Area, CA, US
  
  

2011

• Cooperation Initiatives Among Diverse Sectors (1.1 MB)
  Cyber Security Best Practices Workshop, CICTE/OAS, March 2011, Mexico City, MX
  
  
• CERT.br Incident Handling and Network Monitoring Activities (3.1 MB)
  Cyber Security Best Practices Workshop, CICTE/OAS, March 2011, Mexico City, MX
  
  

2010

• DNS Abuse in Phishing Cases Handled by CERT.br (205 KB)
  ICANN DNS Abuse Workshop, December 2010, Cartagena, Colombia
  
  
• Incident Handling in Brazil (2.3 MB)
  1^st Portuguese CSIRT Seminar, November 2010, Lisbon, Portugal
  
  
• Security X Privacy? (in Portuguese) (412 KB)
  INET Montevideo 2010, Internet Society, July 2010, Montevideo, UY
  
  
• Spampots Project Mapping the Abuse of Internet Infrastructure by Spammers (2.6 MB)
  2010 Annual Meeting of CSIRTs with National Responsibility, June 2010, Miami, FL, US
  
  
• Spampots Project (1.5 MB)
  FIRST 2010 Lightning Talks, June 2010, Miami, FL, US
  
  
• Spampots Project -- First Results of the International Phase and its Regional Utilization (2.6 MB)
  LACNIC XIII, 5^th LACSEC, May 2010, Curaçao, Netherlands Antilles
  
  
• When Data Become Radar: Tracing Spammers and Phishers Through the Abuse of the Internet Infrastructure (1.4 MB)
  APWG CeCOS IV, May de 2010, São Paulo, Brazil
  
  
• The Global eCrime Outlook -- CERT.br National Report (784 KB)
  APWG CeCOS IV, May 2010, São Paulo, Brazil
  
  

2009

• Main Session: Security, Privacy and Openness -- Panel Opening Points (174 KB)
  4th Internet Governance Forum Meeting, November 2009, Sharm El Sheik, Egypt
  
  
• Developments in the SpamPots Project (2.2 MB)
  FIRST Technical Colloquium, October 2009, Santiago, Chile
  
  
• Evolution of financial fraud in Brazil (848 KB)
  CLCERT/FIRST Security Workshop, October 2009, Santiago, Chile
  
  
• SEC.2: The Real Costs of Cybersecurity -- Panel Opening Points (172 KB)
  ITU Telecom World 2009 Forum, October 2009, Geneva, Switzerland
  
  
• Development of an IPv6 Honeypot (674 KB)
  2009 Collaboration Meeting for CSIRTs with National Responsibility, July 2009, Kyoto, Japan
  
  
• Developments in the SpamPots Project (2.2 MB)
  2009 Collaboration Meeting for CSIRTs with National Responsibility, julho de 2009, Kyoto, Japan
  
  
• Preventing your Network from Being Abused by Spammers (12.9 MB)
  fisl10 -- 10º International Free Software Forum, June 2009, Porto Alegre, RS, Brazil
  
  
• Fighting E-mail Abuse and Phishing in Brazil (12.7 MB)
  Yahoo! Security Week 2009, June 2009, Sunnyvale, CA, United States

2008

• Global Field Reports -- Brazil (606 KB)
  APWG 2008 General Meeting, October 2008, Atlanta, GA, United States
  
  
• Incident Management and Computer Security Incident Response Teams (CSIRTs) (3.2 MB)
  4th Caribbean Internet Governance Forum, July 2008, Curacao, Netherlands Antilles
  
  
• New Developments in the SpamPots Project (6.9 MB)
  2008 CSIRTs with National Responsibility Meeting, June 2008, Vancouver, Canada
  
  
• International Cooperation in Internet Security and Incident Handling (516 KB)
  International Symposium on Cyber Crimes and Digital Investigation, Chamber of Deputies, May 2008, Brasília, DF, Brazil

2007

• Challenges and Best Practices in Fighting Financial Fraud in Brazil (6.8 MB)
  2nd Internet Governance Forum Meeting, November 2007, Rio de Janeiro, Brazil
  
  
• Spam Metrics: The SpamPots Project (1 MB)
  30th International Public ICANN Meeting, October-November 2007, Los Angeles, United States
  
  
• Monitoring the Abuse of Open Proxies for Sending Spam (544 KB)
  6th International GOVCERT.NL Symposium, October 2007, Noordwijk, The Netherlands
  
  
• Data Donation Initiatives at the Brazilian Honeypots Alliance (272 KB)
  FIRST Network Monitoring Special Interest Group (NM-SIG) Meeting, October 2007, Noordwijk, The Netherlands
  
  
• Using Honeypots to Monitor Spam and Attack Trends (560 KB)
  ITU Regional Workshop on Frameworks for Cybersecurity and CIIP, October 2007, Buenos Aires, Argentina
  
  
• Regional Updates: Brazil -- Anti-Spam Task Force Developments (6.5MB)
  3rd Joint LAP/CNSA Workshop, October 2007, Washington, DC, United States
  
  
• Spam Metrics -- Brazil (1.1MB)
  Joint LAP/CNSA/MAAWG Workshop, October 2007, Washington, DC, United States
  
  
• International Field Reports -- Brazil (6.1 MB)
  APWG 2007 General Meeting, October 2007, Pittsburgh, PA, United States
  
  
• Using Honeypots to Monitor Spam and Attack Trends (544 KB)
  ITU Regional Workshop on Frameworks for Cybersecurity and CIIP, August 2007, Hanoi, Vietnam
  
  
• Information Security Awareness Videos (4 MB)
  FIRST Technical Colloquium, August 2007, Kuala Lumpur, Malaysia
  
  
• SpamPots Project: Using Honeypots to Measure the Abuse of End-User Machines to Send Spam (576 KB)
  FIRST Technical Colloquium, August 2007, Kuala Lumpur, Malaysia
  
  
• Outreach Initiatives (5.8 MB)
  2007 CSIRTs with National Responsibility Meeting, June 2007, Madrid, Spain
  
  
• SpamPots Project: Using Honeypots to Measure the Abuse of End-User Machines to Send Spam (1.1 MB)
  2007 CSIRTs with National Responsibility Meeting, June 2007, Madrid, Spain
  
  
• SpamPots Project: Using Honeypots to Measure the Abuse of End-User Machines to Send Spam (560 KB)
  LACNIC X, May 2007, Isla Margarita, Venezuela
  
  
• SpamPots Project: Using Honeypots to Measure the Abuse of End-User Machines to Send Spam (1.2 MB)
  AusCERT Asia Pacific Information Technology Security Conference 2007, May 2007, Gold Coast, Australia
  
  
• Honeypots Workshop (3.7 MB)
  Q-CERT, April 2007, Doha, Qatar
  
  
• Outreach Initiatives (2.3 MB)
  Q-CERT, April 2007, Doha, Qatar
  
  
• The Brazilian Honeypots Alliance (1.8 MB)
  FIRST Technical Colloquium, April 2007, Doha, Qatar
  
  
• Distributed Honeypots Network Implementation based on OpenBSD and Free Software Tools (528 KB)
  (Portuguese version)
  fisl8.0 -- 8th International Free Software Forum, April 2007, Porto Alegre, RS, Brazil

2006

• Crimeware Related to Brazilian Frauds (1.3 MB)
  APWG 2006 Fall General Meeting & E-crime Researchers Summit, November 2006, Orlando, FL, United States
  
  
• The Brazilian Honeypots Alliance (1.5 MB)
  RIPE 53, October 2006, Amsterdam, Netherlands
  
  
• Financial Fraud Response in Brazil -- Challenges and Evolution (2.2 MB)
  Collaboration Meeting for CSIRTs with National Responsibility, July 2006, Pittsburgh, PA, United States
  
  
• Distributed Honeypots Project: How It's Being Useful for CERT.br (864 KB)
  Collaboration Meeting for CSIRTs with National Responsibility, July 2006, Pittsburgh, PA, United States
  
  
• Incident Handling and Internet Security in Brazil (2.3 MB)
  LACNIC IX, May 2006, City of Guatemala, Guatemala
  
  
• Fraud and Phishing in Brazil (368 KB)
  AusCERT Asia Pacific Information Technology Security Conference 2006, May 2006, Gold Coast, Australia
  
  
• Distributed Honeypot Deployment in Brazil (560 KB)
  Annual DoD Honeynet Workshop, March 2006, Pasco, WA, United States
  
  

2005

• Fraud and Phishing Scam in Brazil (2.2 MB)
  APWG General Meeting & SuperSummit, November 2005, Montreal, Canada
  
  
• Cybersecurity and Incident Response Initiatives: Brazil and Americas (320 KB)
  ITU TELECOM Americas 2005, T3: Cyber Security, October 2005, Salvador, BA, Brazil
  
  
• Incident Response and Early Warning Initiatives in Brazil (912 KB)
  Conferencia Internacional sobre Seguridad Informática, October 2005, Buenos Aires, Argentina
  
  
• CERT.br: Mission and Services (126 KB)
  Conferencia Internacional sobre Seguridad Informática, Panel I: "La respuesta a incidentes en América Latina", October 2005, Buenos Aires, Argentina
  
  
• CGI.br and CERT.br Initiatives in Incident Response (240 KB)
  II Encontro de Especialistas Governamentais em Segurança Cibernética da OEA (Organização dos Estados Americanos), September 2005, São Paulo, SP, Brazil
  
  
• Honeynet.BR and the National Early Warning Capability Based on a Network of Distributed Honeypots (1 MB)
  SIG^2 Seminar, June 2005, Singapore
  
  
• CERT.br and Developments in Brazil (288 KB)
  17th Annual FIRST Conference on Computer Security Incident Handling, June 2005, Singapore
  
  
• Incident Response Initiatives in Brazil (592 KB)
  ITU WSIS Thematic Meeting on Cybersecurity, June 2005, Geneva, Switzerland
  
  
• A National Early Warning Capability Based on a Network of Distributed Honeypots (1 MB)
  17th Annual FIRST Conference on Computer Security Incident Handling, June 2005, Singapore
  
  

2004

• Honeynets and Honeypots: Companion technology for detection and response (976 KB)
  AusCERT Asia Pacific Information Technology Security Conference 2004, May 2004, Gold Coast, Australia
  
  
• Incident Response and Cyber Security in Brazil (51 KB)
  CITEL IV Meeting of PCC I -- Joint Workshop on Cybersecurity, March 2004, Quito, Ecuador
  Presented by Marcos Bafutto, Anatel

2003

• Honeynets Applied to the CSIRT Scenario (978 KB)
  15th Annual Computer Security Incident Handling Conference, June 2003, Ottawa, Canada