Category: Network security

Snort-based NIDS setup can be error-prone without preparation. Steps include SPAN configuration, virtual machine setup, static IP, and proper Snort installation.

Set up Snort on CentOS for network security by configuring alert rules. Install via source or Docker. Ensure Docker services auto-start for effective…

Nessus security scanner is key for UNIX vulnerabilities, offering local/remote audits, client/server support, a GTK interface, and plugin scripting.

Suricata is a high-performance network threat detection tool used for IDS, IPS, and NSM. It supports various protocols and is ideal for industrial…

After the Xshell incident, companies monitor DNS tunneling by detecting abnormal-length domain requests. A false alarm led to reflections on detection accuracy.

Part of the WitAwards 2016 Annual Security Awards series, the article highlights Cisco’s Firepower 4100 series as a leading Next Generation Firewall (NGFW)…

Enhance your open-source security with these 10 free tools, like Nmap, Security Onion, and Metasploit, to boost productivity and lower enterprise costs.

SRv6, led by experts like Li Zhenbin, enhances network programmability, supporting IPv6 and MPLS. It facilitates deployment with three-layer programmability.

The SSH server is widely targeted by hackers. This article explores SSH backdoors on UNIX systems, discussing types like hard-coded vulnerabilities and malware.

Rsyslog, on Debian, forwards log messages over IP networks. Enable it by editing /etc/rsyslog.conf and restarting service to receive external logs.