Sigma: A generic log signature format
Guest Post: Sigma is an open-source project that tries to solve challenges with store logs in different repositories.
Tag: Guest Post
Threat hunting 101: Hunting with Yara rules
Guest Post: Yara rules are an easy yet important threat hunting tool for searching for malicious files in your directories.
Exploring an idea: Can spreading out repositories speed up RPKI?
Guest Post: RPKI updates need to work their way through certificate chains to a handful of ASes. What if they were more spread out?
DNSSEC KSK Ceremony 43
Guest Post: After issues at recent DNSSEC KSK ceremonies what can we expect at the next one?
Can the DNS support encryption without enabling centralization?
Guest Post: Study shows clients can distribute DNS queries across a set of popular recursive resolvers without performance degradation.
APRICOT 2022 Call for Papers now open
Guest Post: If you have an interesting presentation to share on Internet operations, submit a paper for APRICOT 2022.
DNS security and key ceremonies
Guest Post: What happens at a Root KSK ceremony? What’s at stake, and what could go wrong?
The relevance of heavy hitters and the rise of big-fast flows
Guest Post: Eleven-year study characterizes the rise of heavy hitters and big-fast TCP flows.
Weaponizing middleboxes for TCP reflected amplification
Guest Post: Researchers show how middleboxes and censorship infrastructure can be abused to launch reflected DoS amplification attacks over TCP.
A new Internet architecture
Guest Post: SCION is a clean-slate architecture, overcoming limitations of today’s IP and BGP-based Internet.