Category Archives: open-source

Zeek: Open-source network traffic analysis, security monitoring

Posted on by

Zeek is an open-source network analysis framework. Unlike an active security device such as a firewall, Zeek operates on a versatile ‘sensor’ that can be a hardware, software, virtual, or cloud platform. This flexibility allows Zeek to quie… Continue reading Zeek: Open-source network traffic analysis, security monitoring→

Cilium: Open-source eBPF-based networking, security, observability

Posted on by

Cilium is an open-source, cloud-native solution that leverages eBPF technology in the Linux kernel to provide, secure, and monitor network connectivity between workloads. What is eBPF? eBPF is a technology originating from the Linux kernel that allows … Continue reading Cilium: Open-source eBPF-based networking, security, observability→

SELKS: Open-source Suricata IDS/IPS, network security monitoring, threat hunting

Posted on by

SELKS is a free, open-source, turnkey solution for Suricata-based network intrusion detection and protection (IDS/IPS), network security monitoring (NSM), and threat hunting. The project is developed and maintained by Stamus Networks. SELKS is an effec… Continue reading SELKS: Open-source Suricata IDS/IPS, network security monitoring, threat hunting→

Enhancing security through collaboration with the open-source community

Posted on by

In this Help Net Security interview, Alan DeKok, CEO at NetworkRADIUS, discusses the need for due diligence in selecting and maintaining open-source tools, and brings out the potential risks and benefits of collaborating with the open-source community … Continue reading Enhancing security through collaboration with the open-source community→

Ghidra: Open-source software reverse engineering framework

Posted on by

Ghidra, a cutting-edge open-source software reverse engineering (SRE) framework, is a product of the National Security Agency (NSA) Research Directorate. The framework features high-end software analysis tools, enabling users to analyze compiled code a… Continue reading Ghidra: Open-source software reverse engineering framework→

YetiHunter: Open-source threat hunting tool for Snowflake environments

Posted on by

Cloud identity protection company Permiso has created YetiHunter, a threat detection and hunting tool companies can use to query their Snowflake environments for evidence of compromise. YetiHunter executing queries (Source: Permiso Security) Recent att… Continue reading YetiHunter: Open-source threat hunting tool for Snowflake environments→