Collaborate Disseminate
Attractive to both white-hats and cybercriminals, AI’s role in security has yet to find an equilibrium between the two sides. Continue reading Artificial Intelligence: A Cybersecurity Tool for Good, and Sometimes Bad
I have recently downloaded a trash software (even if normally I do not), and just after done an update of windows 10. After this when I was booting my computer my ventirad (I guess) was running faster and faster (like an expo… Continue reading Svchost without name 50%cpu using and can’t access to "Service tab"
I am planning to make an anomaly detection model, for which I need the duration of particular IP is on the network.
I have with me the DHCP logs and Firewall logs of the Network.
The DHCP servers have a polling period for I… Continue reading How to find how long a particular IP is connected on the LAN?
I want to combine misuse IDS and anomaly algorithms. For this, I want to add PHAD (packet header anomaly detection) to snort or bro. Can someone give me a resource or how I can do in practice?
Continue reading How can I add packet header anomaly detection algorithm to snort or any ids?
hello every body i am studing algotiyhme phad (PACKET HEADER ANOMALY DETECTION) for ids i can’t understand the princpe of this algorithme can some body give me an practical example for calculing the score ?
From Equifax to Yahoo to an unprecedented breach at the National Security Agency, the scope and sophistication of recent security breaches continues to grow—and so does the damage. Yet, data exfiltration remains extremely hard to detect, especially wit… Continue reading Faster Breach Detection, One Step at a Time
A traditional antivirus scans data at rest and data in transit for known virus signatures. (Where “virus” includes trojans, rootkits, et al.)
This does not help when defending against zero-days and active intrusions. By defi… Continue reading What do you call an antivirus that detects suspicious activity?
Say you’re having a basic LAN-infrastructure (a Router, a Firewall, a switch connected with multiple access points, a server and multiple clients).
I want to be able to detect malicious traffic flowing through the network by … Continue reading How to monitor traffic/capture packets on your network?
Most information I found is rather marketing, Does anybody have real experience – Can Carbon black help in detecting hardware changes, in particular adding HDD?
https://www.carbonblack.com/products/cb-protection/
Continue reading Can Carbon black monitor hardware changes? [on hold]
I want to perform anomaly based threat detection on sensor logs received via wireless link to raspberry pi. I not sure of what IDS to be deployed at pi. I came to know that SPADE (ADS of SNORT) is not more included in it. I… Continue reading List of tools providing anomaly detection [on hold]