Cybersecurity Archives - Page 3 of 3

nProbe IPS is an inline application able to both export traffic statistics to NetFlow/IPFIX collectors as well to ntopng, and enforce network traffic using nDPI, ntop's Deep Packet Inspection framework. This blog…

Cybersecurity

May 18, 2021

How to Spot Unsafe Communications using nDPI Flow Risk Score

nDPI it is much more than a DPI library used to detect the application protocol. In the past year, nDPI has grown in terms of cybersecurity features used to detect threats and…

Cybersecurity

May 11, 2021

On Network Visibility and Cybersecurity

Today we had the change to talk about network visibility and cybersecurity during an event organised by the Milan Internet Exchange MIX-IT. In this talk we have presented the current state of…

Cybersecurity

April 26, 2021

Combining nDPI and Wireshark for Cybersecurity Traffic Analysis

At the upcoming Sharkfest Europe 2021 we'll talk about using Wireshark in cybersecurity. Part of the talk will focus on nDPI and Wireshark integration. Since the last release nDPI features flow risk…

Announce

February 3, 2021

Join FOSDEM 2021 ntop sessions, Sat-Sun Feb 6-7th (online)

We are proud to announce that a couple of talks have been accepted at FOSDEM 2021, one of the most important FOSS conferences in the world that this yar will take place…

Cybersecurity

October 23, 2020

Security-Centric Traffic Analysis

Days ago we have given a short speak about cybersecurity at an Italian meetup. These are the presentation slides (English) where you can read more about the steps we have taken to…

Cybersecurity

August 26, 2020

How Attack Mitigation Works (via SNMP)

One of the greatest strengths of ntopng is its ability to correlate data originating at different layers and at multiple sources together. For example, ntopng can look at IP packets, Ethernet frames…

Cybersecurity

August 19, 2020

How to Detect Domain Hiding (a.k.a. as Domain Fronting)

Domain fronting is a technique that was used in 2010s by mobile apps to attempt to bypass censorship. The technique relies on a "front" legitimate domain that basically acts as a pivot…

Cybersecurity

August 4, 2020

Mice and Elephants: HowTo Detect and Monitor Periodic Traffic

Most people are used to top X: top senders, top receivers, top protocols. So in essence they are looking for elephants. While this is a good practice, mice are also very interesting…

nDPI-based Traffic Enforcement on OPNsense/pfSense/Linux using nProbe

How to Spot Unsafe Communications using nDPI Flow Risk Score

On Network Visibility and Cybersecurity

Combining nDPI and Wireshark for Cybersecurity Traffic Analysis

Join FOSDEM 2021 ntop sessions, Sat-Sun Feb 6-7th (online)

Security-Centric Traffic Analysis

How Attack Mitigation Works (via SNMP)

How to Detect Domain Hiding (a.k.a. as Domain Fronting)

Mice and Elephants: HowTo Detect and Monitor Periodic Traffic