Static in the Ether

I have been processing some of my network telescope data collected over the last four and a bit years. During this time I have classified a little over 3.2 million IP addresses by operating system making use of p0f The results after the latest updates are: OS Family % Windows 98.84258 Linux 0.811703 FreeBSD 0.170989 [...]

[Read more →]

My first foray into the tag soup that is  XSL and XSLT has been to turn the XML outputs from the InterNet Barometer System as discussed previously into plain text output which I can use more easily for comparing with some of my other data sources. While A cursory browse cannot find any Terms & [...]

[Read more →]

Interoute has launched a new online Internet Barometer detailing attacks as observed from their 22 monitoring stations across the European portion of the Internet. The site provides rich graph and chart interfaces, which are nicely interactive.  There are definatley some ideas I want to incorporate form this into my own Network Telescope management console.  It [...]

[Read more →]

The Second call for papers ISSA2009, Information Security for South Africa, 6 – 8 July 2009 has been released. http://www.infosecsa.co.za Due dates: Abstract submission: 23 March 2009 (1 page) Notification of abstract acceptance: 31 March 2009 Full papers submission for review: 18 April 2009 Notification of acceptance: 26 May 2009 Submission of final camera-ready papers: [...]

[Read more →]

While trying to follow up on the quite widely publicised Kaspersky website hack I went along to the obvious spot of Zone-h. Having it uncontactable the last two days, I tried again this morning and got the following: Zone-H defaced No Details on this as yet. Hackers blog has more on the Kaspersky hack which [...]

[Read more →]

Robert Auger of Webappsec.org has compiled a good roundup of various security predictions for 2009, as various sites are want to do at this time of year. ComputerWorld – Opinion: Security predictions for 2009 SANS – 2009 Security Predictions ITWorld – Security predictions for 2009 CRN – 10 Security Predictions For 2009 Gartner – The [...]

[Read more →]

While trawling through references, and chasing down files as part of my final PhD push, I came across a  resource compiled by Guofei Gu at Texas A&M. He has provided a Computer Security Conference Ranking and Statistic page. While by his own admission it is somewhat subjective, he makes use of some interesting metrics. If you ahve novel [...]

[Read more →]

The October 2008 Issue of IEEE Spectrum magazine has an nicely phrased piece title “Fresh Phish” by David Schneider describing the potential of the DNS spoofing bug Discovered by Kaminsky. Also worth noting is the focus on Steampunk [1] [2] [3] including a reference to Steampunk band Abney Park

[Read more →]

I came across the following on facebook while doing my monthly catchup on who is who in the zoo. Is it bad design to allow users to inject their own content like this ? In this case is more a case of a litmus test of the awareness of social networking users , in terms [...]

[Read more →]

Version 0.3 of PicViz has been released, based on python and QT – which bodes well for potential portability. This is yet another tool to help one actually filter through piles of connections, using a classic parallel axis setup.  Drilldown is offered. Some example renderings of  the Kaminsky DNS attacks are available. A more advanced [...]

[Read more →]