Collaborate Disseminate
I am doing some research on intrusion detection systems (IDS) and deep packet inspections (DPI). Assuming a system where values are forwarded to a validation system and the validation system does validate (check anomalies, e…. Continue reading Scenario Categorization with Deep Packet Inspection – Intrusion Detection
I am new to information security, and am trying to set-up Snort 2.9.15.0.
It seems like on Windows and Linux, that Snort doesn’t generate any default rules at installation. It doesn’t even generate default files, causing the… Continue reading Snort Doesn’t Generate Default Rules
I was wondering if you could add into a snort rule the ability to only alert if the first 3 bytes match. I think I need to edit the content in my current rule content:”|37 e1 a4|”; I can add the full rule if that can help.
… Continue reading Snort Content first 3 bytes the same then create an alert
Open source security software can cause teams to spend more time maintaining a tool than securing their network – this case study describes how Bricata solves that challenge.
The post Open Source Security Software: Takeaways from a Case Study on … Continue reading Open Source Security Software: Takeaways from a Case Study on DIY Fatigue
Trying to troubleshoot what could be causing traffic overload on a sensor for security onion?
Continue reading What could be causing a sensor overload on an enterprise security onion deployment?
As part of application security compliance we are supposed to implement an IPS on our application. The application is basically an educational web portal where students can enrol for course assessment. The assessment will be … Continue reading IPS solution for a medium sized web application
I’m having trouble understanding the difference between NIDS (Network-based Intrusion Detection System) and NBA (Network Behavior Analysis)
It is to my understanding that
NIDS use two detection methods :
Signature-based … Continue reading Difference between NIDS and NBA
I am using Hyperion v2.1 to scramble (polymorphism) some .exe file:
hyperion.exe myexefile.exe scrambled.exe
The resulting scrambled.exe file is detected and deleted by the AV or IDS system.
As far as I know, Hyperion p… Continue reading Executable scrambling with Hyperion is detected. What can I do?
Anything Red/Purple Teaming
The post Anything Red/Purple Teaming, Jason Lang – PSW #620 appeared first on Security Weekly. Continue reading Anything Red/Purple Teaming, Jason Lang – PSW #620
Investigating the Insider Threat
The post Investigating the Insider Threat, Chris Bush – BSW #143 appeared first on Security Weekly. Continue reading Investigating the Insider Threat, Chris Bush – BSW #143