You Cannot Defend What You Cannot See: Gaining Insight into Proprietary Protocols through Custom Parsers with Zeek

A vital component of any information security architecture is a network intrusion detection capability. Commercial network intrusion toolsets come preloaded with parsers to deconstruct common network traffic types into segments that can be analyzed for abnormal activity. These parsers are limited...

By

Ian Paquette

January 6, 2022

All papers are copyrighted. No re-posting of papers is permitted

Related Content

NIS2 - Blog - NIS2 Compliance for OT- Strategic Implementation of ICS Controls_340 x 340.jpg

Cybersecurity Leadership, Industrial Control Systems Security

NIS2 Compliance for OT: Strategic Implementation of ICS Controls

NIS2 plays a crucial role in enhancing OT's cybersecurity posture.

ics blog image.png

Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting

A Visual Summary of SANS ICS Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS ICS Security Summit 2024

ICS - Blog - Essential Cybersecurity Practices for Protecting Industrial Infrastructure_340 x 340.jpg

Industrial Control Systems Security

Essential Cybersecurity Practices for Protecting Industrial Infrastructure

Understand the practices necessary to shield critical infrastructure from cyber threats that could disrupt operations or endanger lives.

SANS ICS Security