Good Bot, Bad Bot: Characterizing Automated Browsing Activity
Explore Aristeus, a system for deploying honeysites to study malicious bot behavior. Learn about bot traffic patterns, attack strategies, and the importance of understanding automated browsing activity for web security.
Security Onion 2.1 - Import Node and so-import-pcap Tutorial
Explore Security Onion 2.1's new Import Node feature and so-import-pcap tool for easy setup and PCAP analysis. Learn how to get started with minimal hardware requirements.
Building a Minimal Security Onion VM with sosetup-minimal
Learn to set up a minimal Security Onion virtual machine with dual NICs, focusing on Evaluation Mode installation and basic configuration for network security monitoring.
Network Baseline Generation and Alerts with Bropy - Security Onion 2017
Learn to generate network baselines and alerts using Bropy, empowering small security programs with effective monitoring and threat detection techniques.
Detecting Suspicious Activity on Linux Endpoints Using Security Onion
Learn to identify and analyze suspicious activities on Linux systems using Security Onion's powerful tools and techniques for enhanced endpoint security.
Security Onion Dashboards - Analyst-Designed Interface for Speed and Dynamic Capabilities
Explore Security Onion's new Dashboards interface, designed for speed and dynamic capabilities, empowering analysts with efficient data visualization and analysis tools.
Intrusion Detection Honeypots with Security Onion - Layers of Deception
Explore Intrusion Detection Honeypots as a cost-effective security measure. Learn to deploy honey services in your network and integrate alerts into Security Onion's monitoring pipeline.
Building, Managing and Operating a Decentralized Cloud for Telco Apps - Lessons Learned
Explore lessons from building a decentralized cloud for telco apps, covering deployment challenges, operational insights, and best practices for managing complex distributed systems.
Evolution of Application Visibility for Telcos: From Programmable Switches to Cloud Native
Explore the evolution of application visibility for telcos, from programmable switches to cloud-native solutions, focusing on scalability, affordability, and tackling encryption challenges in complex modern applications.
Traffic Capture and Analysis with tcpdump
Learn to capture and analyze network traffic using tcpdump, a powerful command-line packet analyzer. Gain practical skills for network monitoring, troubleshooting, and security analysis.
Do No Harm: OT-Native Approach for Network Monitoring and Cybersecurity
Explore seven principles of OT cyber-network visibility and monitoring for effective cybersecurity in industrial environments. Learn to implement a tailored approach that protects critical infrastructure while maintaining operational integrity.
Leveraging macOS Networking Frameworks for Heuristic Malware Detection
Explore open-source methods for building network state enumerators and advanced monitors on macOS to detect sophisticated malware through unauthorized network access detection.
mmTLS - Scaling the Performance of Encrypted Network Traffic Inspection
Innovative framework for scalable TLS middleboxes, enhancing encrypted traffic inspection performance while preserving security. Outperforms existing solutions with minimal overhead and high throughput.
Using a Cloud Telescope to Observe Internet-Wide Botnet Propagation Activity
Explore the Cloud Telescope: a global, cloud-native architecture for capturing cybernetic activity. Learn about its design and discover insights from recent experiments on botnet propagation and infection patterns.
Accelerating Packet Capture Using FPGA
Explore FPGA-based packet capture acceleration techniques for enhanced network monitoring and analysis performance.
Logging Modernization and Cybersecurity at Scale with MiNiFi, Kafka and Flink
Modernize logging and enhance cybersecurity using MiNiFi, Kafka, and Flink. Learn efficient log collection, processing, and streaming analytics for global network monitoring and alert generation.
Managing OVN at Scale: Best Practices and Challenges in OpenStack Clusters
Discover practical strategies for managing and scaling OVN in large OpenStack clusters, focusing on monitoring, troubleshooting, and maintaining optimal performance in production environments.
Cloud Native Observability for 5G and 6G Networks
Discover how to implement multi-cloud observability solutions for 5G/6G networks using open-source approaches, enabling AI-OPS and real-time monitoring across the entire network stack.
Setting Up Monitoring for Calico's eBPF Data Plane
Learn to set up and optimize monitoring for Calico's eBPF Data Plane, enhancing network visibility and performance in cloud-native environments.
Getting Familiar with Security Observability Using eBPF and Cilium Tetragon
Explore security observability using eBPF and Cilium Tetragon. Learn to extract data, monitor activities, and detect container escapes for enhanced incident prevention and response.
Tracing HTTP/2 Traffic Using gRPC Tapping Filter with Hardware Acceleration
Explore advanced HTTP/2 traffic tracing techniques using gRPC tapping filter, enhanced with hardware acceleration for improved performance in microservice architectures.