Suricata 101
Details
Presentation Summary
With the increasing reliance on the internet for all businesses and transactions, the importance of monitoring the network has never been greater. In order to detect or prevent such attacks, network monitoring is of the utmost importance. In this talk, we will introduce you to Suricata, which is a world-class network monitoring and security tool. Suricata is a robust engine for network detection, prevention, and security monitoring. This means that while Suricata can serve the purpose of detection and prevention, it can also provide you with a lot of network metadata with its engine that you can use to analyze the traffic and determine a course of action. Where does Suricata's power come from? Suricata is a high-performance network monitoring and security engine with active and passive monitoring, metadata logging and real-time file identification and extraction - this allows Suricata to quickly identify, stop, and assess the most sophisticated attacks. Suricata integrates seamlessly with your network and can be embedded within numerous respected commercial and open source solutions.
Join us for an introduction to Suricata, where we shall show: how to install and use it on your network; how to build a simple system of detection on your home network; different ways Suricata ingests traffic; different logs of Suricata, and how to analyze them; and rule management with Suricata-update. We shall also work on a real-world malware example, see how to make Suricata detect it, and analyze logs to get a lot more information
Bios:
Shivani Bhardwaj
Shivani is a Junior Developer at OISF. She has been involved in the development of Suricata and all its helper tools like Suricata-Verify (in-house QA project), Suricata-Update and suricatasc (Suricata Socket Control). She is found in India for most of the year.
Juliana Fajardini Reichow
Juliana started working with OISF through an internship with Outreachy and is now a Junior Developer working mainly with protocol implementation and writing documentation for Suricata. She strongly believes in the power of diversity and inclusion, communities, knowledge sharing, and giving back. Juliana currently lives in Portugal.