Bro Network Programming Language & Bro-ids v2.1 - GitHub

Recommend Documents

Feb 25, 2013 - DIRECTORY STRUCTURE bin etc. Include lib share bro base misc protocols ftp http irc smtp â¦ frameworks u

IMAGI- Child Friendly Programming Language - GitHub

2. Introduction. Project Motivation. With the technology industry developing at a rapid pace, the need for more programm

Programming - GitHub

Jan 16, 2018 - The second you can only catch by thorough testing (see the HW). 5. Don't use magic numbers. 6. Use meanin

Frenetic: A Network Programming Language

difficult to maintain. This paper presents Frenetic, a high-level language for program- ... Keywords Network programming languages, domain-specific languages ...

Programming - GitHub Pages

Programming. Cheat Sheet with Stata 14.1. For more info see Stata's reference manual (stata.com). Tim Essam (tessam@usai

Programming ESP8266-01 - GitHub

Programming ESP8266-01. Using ... Use Arduino IDE 1.6.5 (not higher). Page 7. Start Upload in Arduiono IDE via FTDI. â¢

ImNet: An Imperative Network Programming Language

Feb 23, 2014 - KeyâWords: Network programming languages, controller-switch architecture, ... applications such as monitoring data flow, balancing.

Frenetic: A Network Programming Language - cs.Princeton

network switches using a programmable controller that runs sep- arately on a ..... implementing this program in NOX is difficultâwe cannot run the two smaller ...

Programming Language

Programming Language. • Course Outline. 1. ... Object-Oriented Programming. 9. Concurrency. 10. ... Robert W. Sebesta, Concepts of Programming. Languages ...

2Formatted LCLF manuscript v21

Corresponding Authors Email: [email protected]. 1 INTRODUCTION .... in area of Swift Current Saskatchewan, with a peak current of -598.0kA.

C2 language - C2 Programming Language

The C programming language has been around for a long time and is still used a lot nowadays. The core of the language is

Network Programming

Java's socket model is derived from BSD (UNIX) sockets, introduced in the early ..... [Ste97] UNIX Network Programming by W. Richard Stevens, Prentice Hall,.

Network Programming

▫Programmer's view of the Internet ... Every network application is based on the client-server model: ..... W. Richard Stevens, “Unix Network Programming:.

Network Programming

Chapter 11. Network Programming. Network applications are everywhere. Any time you browse the Web, send an email message, or pop up an X window, you ...

Functional Programming with Bananas, Lenses ... - GitHub Pages

A bifunctor y is a binary operation taking types into types and functions into ... Closely related to the functor k are the projection and tupling combinators: (x; y) = x.

Reference Sheet for CO120.3 Programming III - GitHub

GBB. B dËrief en enum type thât represents flâgs for renderingF. B. B iââ¢h Ëit represents â different flâg

a network programming language based on concurrent ... - CiteSeerX

timeout. timer!10 blocks a process for 10 seconds. The combination of selective execution and a timer channel is used to .... as Perl, Ruby, and Python. However ...

The VBA Programming Language

tions, you need to first become fluent in the VBA programming language. ... In ArcGIS, your application does not directly reference an object. Instead, it points to ...

The Go Programming Language

Mar 14, 2014 ... was to fill an empty niche in the podcast ecosystem: a deeply ... have been programming languages, de- ... and Java were more than a decade.

Programming Language Pragmatics

1.5 Programming Environments. 24 ... 2.1 Specifying Syntax: Regular Expressions and Context-Free Grammars. 42 ... 2.4.3 Grammar and Language Classes.

Programming Language - CiteSeerX

resource Strangelove import piglet body Strangelove(pc : cap piglet) write("Dr. Strangelove is alive") reply pc.squeak("I am Dr. Strangelove") end Strangelove.

Lua Programming Language

Mar 7, 2011 ... Lua is an embeddable scrip«ng language that aims for .... If you need a book to start †… ... The factorial is an example of a recursive func«on:.

The C Programming Language

The C language consists of a small set of core commands and a large ... this chapter, we will cover the most basic of the core commands of the language, as.

Visual Programming Language

Visual programming is programming in which more than one dimension is used to convey semantics. Examples ..... Acknowledgments and Bibliographic Notes.

Bro Network Programming Language & Bro-ids v2.1 - GitHub

Download PDF

15 downloads 244 Views 1MB Size Report

Comment

HTTPS. SMTP. POP/IMAP. SSL/TLS. VPN. SIP. (DTLS). SSL/TLS USE CASES. + Credit Checks. + Authorization and Accounting. +

Bro Network Programming Language & Bro-ids v2.1 Detecting Expiring SSL Certificates

Presented by Liam Randall 2013-3

ABOUT ME History  17 Years Consulting (1995)  BS in CS from XU  Dozens of Vender Certs  Speak/Train- Shmoocon, Skydogcon  “Applied NSM” Summer of 2013  #Bro  #SecurityOnion  [email protected]  @Hectaman Twitter/IRC

LINKS

github.com/bro github.com/liamrandall

#Bro_IDS @Hectaman @Bro_IDS

http://bro-ids.org http://liamrandall.com

OVERVIEW

“Can Bro IDS tell me when my SSL/TLS Certificates are about to expire?”

It already does.

FOLLOW ALONG Documentation http://www.bro-ids.org/documentationgit/scripts/policy/protocols/ssl/expiring-certs.html TL;DR: Add the following to your local.bro  @load policy/protocols/ssl/expiring-certs.bro  redef SSL::notify_certs_expiration = ALL_HOSTS; ( LOCAL_HOSTS, REMOTE_HOSTS, ALL_HOSTS, NO_HOSTS )

SSL/TLS USE CASES Widespread + + + + +

Credit Checks Authorization and Accounting Supply Chain Management e-Commerce Marketing

HTTPS

SMTP POP/IMAP

SSL/TLS VPN

SIP (DTLS)

DEMONSTRATION @load policy/protocols/ssl/expiring-certs.bro redef SSL::notify_certs_expiration = ALL_HOSTS; sudo broctl check sudo broctl install sudo broctl restart

DEMONSTRATION @load policy/protocols/ssl/expiring-certs.bro redef SSL::notify_certs_expiration = ALL_HOSTS; sudo broctl check sudo broctl install sudo broctl restart

DEMONSTRATION @load policy/protocols/ssl/expiring-certs.bro redef SSL::notify_certs_expiration = ALL_HOSTS; sudo broctl check sudo broctl install sudo broctl restart

DEMONSTRATION @load policy/protocols/ssl/expiring-certs.bro redef SSL::notify_certs_expiration = ALL_HOSTS; sudo broctl check sudo broctl install sudo broctl restart

DEMONSTRATION @load policy/protocols/ssl/expiring-certs.bro redef SSL::notify_certs_expiration = ALL_HOSTS; sudo broctl check sudo broctl install sudo broctl restart

DEMONSTRATION @load policy/protocols/ssl/expiring-certs.bro redef SSL::notify_certs_expiration = ALL_HOSTS; sudo broctl check sudo broctl install sudo broctl restart

DEMONSTRATION @load policy/protocols/ssl/expiring-certs.bro redef SSL::notify_certs_expiration = ALL_HOSTS; sudo broctl check sudo broctl install sudo broctl restart - or test from the command line bro –r test.pcap expiring-certs.bro config.bro

REAL WORLD: TLS EDITION Clients

Partners

REAL WORLD: TLS EDITION Clients

Partners

REAL WORLD: TLS EDITION Clients

Partners

REAL WORLD: TLS EDITION Clients

Partners

REAL WORLD: TLS EDITION Clients

Partners

REAL WORLD: TLS EDITION Clients

Partners

REAL WORLD: TLS EDITION Clients

Partners

REAL WORLD: TLS EDITION Clients

Partners

CONCLUSION

“How much will it cost your organization to not run Bro IDS?”