Category: Information Security
Everything filed under Information Security.
New Fake Vulnerability Service - SVE
The SVE service is a fake new service solely put out there to facilitate some inane puzzle. You can reference SVE-2015-9999 via this URL and hopefully this will make it possible for google to get it back in their…
Moving From system() calls to Rcpp Interfaces
Over on the Data Driven Security Blog there's a post on how to use Rcpp to interface with an external library (in this case ldns for DNS lookups). It builds on another post which uses system() to make a call to dig to lookup DNS TXT…
Using Twitter as a Data Source For Monitoring Password Dumps
I shot a quick post over at the Data Driven Security blog explaining how to separate Twitter data gathering from R code via the Ruby t (github repo) command. Using t frees R code from having to be a Twitter processor and lets the analyst…
Data Driven Security Roundup: betaPERT, Shiny, Honeypots, Passwords & Reproducible Research
Jay Jacobs (@jayjacobs)—my co-author of the soon-to-be-released book Data-Driven Security—& I have been hard at work over at the book's sister-blog cranking out code to help security domain experts delve into the dark art of data…
Data-Driven Security (The Book) Update #ShamelessSelfPromotion
Here's the list of links to e-tailers (man, I hate that term) who have it available for the various e-readers out…
Preparing For The February 2014 Book Launch
We setup a live Amazon "sales rank" tracker over at the book's web site and provided some Python and JavaScript code to show folks how use the AWS API in conjunction with the dygraphs charting library to do the same for any ISBN. In the…
ZeroAccess Bots Desperately Seeking Freedom (Visualization)
I've been doing a bit of graphing (with real, non-honeypot network data) as part of the research for the book I'm writing with @jayjacobs and thought one of the images was worth sharing (especially since it may not make it into the book…
Reverse IP Address Lookups With R (From Simple To Bulk/Asynchronous)
R lacks some of the more "utilitarian" features found in other scripting languages that were/are more geared—at least initially—towards systems administration. One of the most frustrating missing pieces for security data scientists is the…
IP Intelligence Lookup Chrome Extension
The topic of "IP intelligence" gets a nod in the book that @jayjacobs & I are writing and it was interesting to see just how many sites purport to "know something" about an IP address. I shamelessly admit to being a Chrome user and noticed…
Summer 2013 @GraniteSec Is ON!
Like an aging action hero, @GraniteSec is back in action after an unexpected hiatus. Join us on August 17th for food and fun at the beautiful Fort Foster in Kittery Point,…