Network Traffic Analysis using Deep Packet Inspection and Data Visualization

Eventpad: the Sublime editor for network traffic

ArrayX

Playlists: 'SHA2017' videos starting here / audio / related events

For the protection of (critical) infrastructures against complex virus attacks, deep packet inspection is unavoidable. In our project SpySpot we are developing new tools and techniques to assist analysts in gaining insight and reverse engineering WireShark PCAP files. In this talk we present and demo a new data visualization system Eventpad to study PCAP traffic by visualizing patterns according to user-defined rules. We illustrate the effectiveness of the system on real-world traffic including VoIP communication and Ransomware activity in file systems.

#NetworkSecurity #DeviceSecurity

Download

Related

Embed

Share:

Tags