After the big success of the first Usenix Enigma conference in 2016 I set my mind on participating in 2017. Conveniently, I run the program committee of the Swiss Cyberstorm Conference (October 18, 2017) which gives me a good excuse to take a week off and to fly to California. I landed during the #NoMuslimBan […]
@avarx_ is part of the Swiss team for the European Cyber Security Challenges and also a member of the TYPO3 security team. I joined with him to start a set of TYPO3 rule exclusions for the OWASP ModSecurity Core Rule Set 3.0 (short CRS3). This is a set of rules to be deployed on a WAF in order to […]
This is a Zenpack for Fortinet FortiGate firewalls. The Fortigate MIB is very well-designed and allowed for a comprehensive Zenpack implementation using zenpacklib. Features: serial number and firmware version interface traffic CPU load memory load disk usage session count IPS statistics Sensors (voltage, temperature, fans, PSU) Vdoms Per Vdom : interface traffic CPU load memory […]
What I like about Ivan Ristić’s ModSecurity Book is the wide approach it takes. The multipurpose nature of ModSecurity makes it hard to overview all the areas and all the functionality. But Ivan did a very good job providing a gentle introduction to all these areas. Hence, it proved to be the standard book for […]
Event transformation is a cool feature of Zenoss, but care must be taken to avoid slowing down Zenoss too much, as badly performing event transformations applied to a large number of events might slow down Zenoss. Besides, any exception within an event transformation ends up in $ZENHOME/log/zeneventd.log, so your code needs extra care to avoid […]
