Collaborate Disseminate
Can an IDS/IPS work simultaneously with signature-based policy and anomaly-based policy?
Searches about methods used to bypass IPS/IDS, show only results about NIDS and NIPS: obfuscation, encryption, fragmentation but what about HIDS and H… Continue reading Some questions about IDS/IPS
Adam always reads his e-mails on Sundays around 5 pm. This Saturday,
at 11 am, he accessed his inbox. Which will generate a false positive?
Source slide 10/41
Misuse-based IDS or anomaly-based IDS? IMO the answer should be anomaly-based … Continue reading Misuse vs anomaly detection alerts
We want to improve cyber security and I consider installing Suricata on our firewall (pfSense). Malware and Ransomware (as for anyone, I guess) concerns me much and one way to deny Ransomeware its need is to block IPs for c2 Server or othe… Continue reading IP Blocklists for Firewall (pfSense)
I have developed a free, simple, portable, easy-to-install, light weight IDS/IPS application (currently available for Linux) and I would need feedback for it.
Few features: ARP spoofing detection, backdoor detection, DNS leak detection, IP… Continue reading Testing of new and free security IDS/IPS app (Simple Network Guard) [closed]
I attempted to enroll in Apple’s Developer Program through their IOS Developer app today and encountered an odd surprise. After providing basic information in the first couple of pages, I was puzzled when it requested access to my camera. … Continue reading Why does Apple need a state issued photo ID to sign up for their developer program?
I attempted to enroll in Apple’s Developer Program through their IOS Developer app today and encountered an odd surprise. After providing basic information in the first couple of pages, I was puzzled when it requested access to my camera. … Continue reading Why does Apple need a state issued photo ID to sign up for their developer program?
I study computer security and I read articles about the potential usage of sequential pattern mining in IDPS products:
Database intrusion detection using role and user behavior based risk assessment
Building intrusion pattern miner for Sn… Continue reading Are sequential patterns used in practice?
We are building a packet based anomaly detection system and I’m trying to find labeled packets.
Such dataset doesn’t exist based on my search, but I can find labeled flows.
Can we say that every packet is hostile which is part of a flow th… Continue reading Is every packet of a hostile network flow hostile?
We have a need to check the arrival time of two relative packets, like packet1 and packet2, if packet2 arrives too late after packet1, we want an alert for it.
Is it possible to write a rule for this? I go through the suricata’s doc and fe… Continue reading Can I write a suricata rule based on the timestamp the packet arrives on the host?
In my Cybersecurity class, we are doing an assignment where we are building a Network Monitoring System to monitor upstream and downstream traffic. Some requirements of this project include:
Must be under 100$
Must use at least 5 devices
… Continue reading Creating a Network Monitoring solution [closed]