ITWeb Security Summit 2013

It's that time of the year again and the ITWeb Security Summit is just around the corner. I will be speaking on defense strategies, see you there.

ITWeb Security Summit 2012 Content

The slides and audio from the summit have been posted. I haven't had a chance to listen to my audio, be warned my slides probably won't be to helpful without it.

ITWeb Security Summit 2012

I'll be presenting on SAP security at the ITWeb Security Summit on the 15th of May. If you are interested in Security Engineering or SAP, come say hello.

ZaCon III Presentation

Rather late than never, I've spotted my ZaCon talk on the the DiscussIT and ZaCon Vimeo feed. The DiscussIT audio feed contains the Q&A.

Picking up stones behind broken windows

Comments welcome.

ZaCon III

I've just received confirmation that my abstract has been accepted, I'll see you at ZaCon III 

Authentication Concept Map

I've put together the following Authentication (AuthN) concept map.

Data Visualization

One of the most useful ways to communicate or understand information is to visualize the data. In security this is vital due to the sheer volumes of data you often have to contend with i.e. from the secviz community.

Splunk can enable you to quickly find and parse data, however you often need to send the data to something like graphviz so that I can see it.

I've written an app that adds a new search command to Splunk that will enable you to generate a graph from your search data.


* | viz field1=ip1 field2=ip2 label=proto flatten=true file=/tmp/network1.png

 * | viz field1=ip1 field2=ip2 label=proto flatten=true file=/tmp/network2.png rankdir=RL

One of the nice features is that you can add graphviz options directly to the command i.e. rankdir=RL

The app can be obtained via http://github.com/marinus, comments & patches are welcome.