Blog

In my previous posts in this series, I laid out my plan to enable Threat Hunting in a scalable way for a cloud environment by integrating Bro IDS with CloudLens, hosted on Kubernetes, with Elasticsearch and Kibana as the user interface. I also gave brief overviews of the key components, how to…

As I discussed in my last blog post, multicast gaps are a major problem that affect market data feeds and those making trades using the data. Due to the nature of UDP broadcasting (or IP multicasting), the issue is not if a gap will occur in the data sequence, but when. This type of multicasting is…

Analysis and research on the state of cloud security has become richer and more prescriptive. Some security firms now provide services specifically to users of AWS, Azure, and Google Cloud. One such firm is RedLock, which employs a Cloud Security Intelligence (CSI) team to examine and report on…

In my previous posts in this series, I laid out my plan to enable Threat Hunting in a scalable way for a cloud environment by integrating Bro IDS with CloudLens, hosted on Kubernetes, with Elasticsearch and Kibana as the user interface. I also gave brief overviews of the key components, explained…

An in-depth discussion of Ixia’s most recent Cyber Combat Event in Hong Kong. Abraham Lincoln is unduly credited with having once uttered, “Give me six hours to chop down a tree and I will spend the first four sharpening the axe.” Although this inspirational quote extolls the virtue of diligent…

In the beginning of this series, I've discussed the rational behind the need for IDS and implementing it using a lift-and-shift visibility strategy.  The last post introduced a cloud native visibility architecture by leveraging the public cloud to provide a centralized management…

Recently the Computer Security and Industrial Cryptography (COSIC) research group at KU Leuven, a research university in Belgium, did a neat trick. In seconds they cloned a key fob and used it to enter and drive away with a Tesla Model S. The video, which shows the proof of concept attach in…

In my previous posts in this series, I laid out my plan to enable Threat Hunting in a scalable way for a cloud environment by integrating Bro IDS with CloudLens, hosted on Kubernetes, with Elasticsearch and Kibana as the user interface. I also gave brief overviews of the key components, and how to…